topic Re: password policy in Operating System - HP-UX

password policy

sheevm — Thu, 09 Dec 2004 10:50:51 GMT

We are running 11.0 HP-UX. Currently this is non trusted system. I want to enforce the following password policy:

Min 7 Char
atleat one numeric and one special char.

Can someone give me some tips and best way of doing this?

Thanks in Advance

Re: password policy

RAC_1 — Thu, 09 Dec 2004 10:58:52 GMT

man 4 security

You can prepare the /etc/default/security file to enforce the requirements. If you do have man page for it, you need to install a patch that introduced this file.

Anil

Re: password policy

Pete Randall — Thu, 09 Dec 2004 10:59:19 GMT

With the latest patches, your 11.0 system can specify this in the /etc/default/security file with the paramaters MIN_PASSWORD_LENGTH and PASSWORD_MIN__CHARS. See man security.

Pete

Re: password policy

Sanjay_6 — Thu, 09 Dec 2004 11:00:22 GMT

Hi,

you can do this by forcing the restriction using the file /etc/default/security

Try this link from itrc,

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000076534451

The itrc doc id is KBRC00011604.

Hope this helps.

regds

Re: password policy

Pete Randall — Thu, 09 Dec 2004 11:04:37 GMT

The patches, if you don't have them, are:

http://www2.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.pdb|patch.breadcrumb.search|&patchid=PHCO_27721&context=hpux:800:11:00
http://www2.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.pdb|patch.breadcrumb.search|&patchid=PHCO_29249&context=hpux:800:11:00

Pete

Re: password policy

sheevm — Thu, 09 Dec 2004 11:36:52 GMT

Thanks to all of you for the response.

Pete,

Can I enforce the password policy by just converting it to trusted system? or it can only be done via security file?

Re: password policy

Pete Randall — Thu, 09 Dec 2004 12:51:05 GMT

Either way will accomplish what you want. Converting to a trusted system will add a lot more than just your relatively simple requirements, that's why the /etc/default/security file was developed: it's a way to implement a few of the features of trusted systems without going through all the bother of converting to trusted.

Pete