topic Re: password aging in Operating System - HP-UX

password aging

Cifs 9000 — Fri, 29 Jun 2007 13:38:24 GMT

system hp 11.0

we are using non - trusted system
we are using kerberos and pam.

but i want password aging how can i use it

# passwd -r files -f -x 70 -n 7 testuser
I tried this after I go this message

HP-UX xyz.abcd.com B.11.11 U 9000/800 (tb)

login: testuser
Password:
Your password has expired. Choose a new one
Changing password for testuser
Sorry.
login:

Re: password aging

Court Campbell — Fri, 29 Jun 2007 13:44:37 GMT

> HP-UX xyz.abcd.com B.11.11 U 9000/800 (tb)

sure you are not 11.11?

you can install shadow passwords to get this functionality.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

Re: password aging

A. Clay Stephenson — Fri, 29 Jun 2007 15:13:14 GMT

You don't have to be a trusted or shadowed system for password aging and minimum time between password changes to work. In fact, this functionality has been in UNIX since the dawn of time even with NIS. No other form of password expiration is possible with the vanilla passwd file. You should note that although you specify the values in days the actual resolution is weeks because of how the data are encoded. The weeks actually end on Thurdays because 1-Jan-1970 fell on a Thursday.

Re: password aging

Dennis Handly — Fri, 29 Jun 2007 22:20:22 GMT

>Clay: The weeks actually end on Thurdays

That's only if you are near GMT. In the US, it ends on Wed.

Re: password aging

Cifs 9000 — Mon, 02 Jul 2007 08:29:57 GMT

In Hp-ux 11.0 , I don't think we can install shadow password if yes please let me know.

2. we r not using trusted system how to password aging or with any script can be force user to change password within 90 days.

3. I could not understand about 1970, thrusday thing. Could u please explain me.

Re: password aging

Dennis Handly — Mon, 02 Jul 2007 08:40:48 GMT

The password aging is encoded in the 4 chars that are after the "," in the password field in passwd(4).

The granularity is in terms of weeks since the start of the Epoch, which was Thursday, Jan 1, 1970 as Clay mentioned

See:
http://docs.hp.com/en/B2355-60130/passwd.4.html