topic Re: password policy - query in Operating System - HP-UX

password policy - query

Jagadesh_2 — Thu, 08 Dec 2005 16:34:29 GMT

Hi All,

I have a requirement to enable the below security policies in HPUX 11.11/11 servers.

1)Non-numeric in first and last position
2)Maximum consecutive identical character from any position in the previous password
3)Maximum identical consecutive characters

Please let me know how to enable this in trusted and non-trusted system.

Many Thanks
S.Jagadesh

Re: password policy - query

HGN — Thu, 08 Dec 2005 16:40:38 GMT

Hi

In SAM

SAM>Accounts for users & groups>select User Modify security policies>password format policies.

Rgds

HGN

Re: password policy - query

HGN — Thu, 08 Dec 2005 16:42:36 GMT

Hi

Sorry I misunderstood your question , the previous post may or may not be useful.

Rgds

HGN

Re: password policy - query

Rick Garland — Thu, 08 Dec 2005 17:43:27 GMT

You can set options in the /etc/default/security file (create if doesn't exist)

Options are available to specify password complexity.

As to 1st-last characters, this is not done in the security file. But you can specify the number of non-alpha characters, the number of upper-case characters, etc.

Do a 'man security'

Re: password policy - query

Bill Thorsteinson — Thu, 08 Dec 2005 18:10:28 GMT

There are pam modules to verify password
formats. Generally, they check strength
based on number of characters with credits
for numeric, and special characters.
They can also verify that the new password
has is sufficiently different from the
previous one.

libpam_cracklib is one such module.

You can also write your own modules.

Password checking is generally disabled
when root sets the password.

Re: password policy - query

Raj D. — Thu, 08 Dec 2005 18:43:26 GMT

Hi Jagadesh ,

First the system needs to be trusted system.
And hope you can do it with /usr/lbin/modprpw , also check for /etc/default/security file. Though I am not sure for the above parameters. check #man modprpw.

To check if the system is trusted , you can do :

# cd /usr/lbin
# ./getprdef -r

hth,
Raj.

Re: password policy - query

Raj D. — Thu, 08 Dec 2005 18:48:58 GMT

Hi (again) Jagadesh,

You can check this link for more details for setting up password controls :

http://docs.hp.com/en/B2355-90121/ch02s06.html#d0e3540

Hope this will help.

Cheers ,
Raj.