topic how to enable long passwd in hpux 11.31 OS in Operating System - HP-UX

how to enable long passwd in hpux 11.31 OS

yangk — Thu, 29 Apr 2010 03:00:15 GMT

Dear All,

Do you how to enable the long passwd the hpux 11.31 OS ? Now the default max passwd length is 8 bits.

Thanks!

Kevin,

Re: how to enable long passwd in hpux 11.31 OS

Kapil Jha — Thu, 29 Apr 2010 03:27:32 GMT

do u have truested server.
******************
passwords must contain at least N characters. For untrusted systems, N can be any value from 6 to 8.
For trusted systems, N can be any value from 6 to 80.
*****************

If you have trueted system you can update it in /etc/security file.

BR,
Kapil+

Re: how to enable long passwd in hpux 11.31 OS

singh sanjeev — Thu, 29 Apr 2010 03:28:14 GMT

check what is the password length parameter in /etc/default/security

MIN_PASSWORD_LENGTH
This attribute controls the minimum length of new passwords. On trusted systems it applies to all users. On standard systems it applies to non-root local users and to NIS users. The system-wide default defined here may be overridden by defining per-user values in /var/adm/userdb (described in userdb(4)).

MIN_PASSWORD_LENGTH=N New passwords must contain at least N characters. For standard systems, N can be any value from 3 to 8. For trusted systems, N can be any value from 6 to 80.

Default value: MIN_PASSWORD_LENGTH=6

Re: how to enable long passwd in hpux 11.31 OS

Kapil Jha — Thu, 29 Apr 2010 03:28:48 GMT

man security for more information

security(4)

/etc/default/security is the file.

BR,
Kapil+

Re: how to enable long passwd in hpux 11.31 OS

yangk — Thu, 29 Apr 2010 05:26:28 GMT

Dear All,

Thank you very much!

But do you have used the depot LongPass11i3.depot
to enable the long passwd?

Maybe it should change the pam.conf file.

Thanks!

Re: how to enable long passwd in hpux 11.31 OS

Hakki Aydin Ucar — Thu, 29 Apr 2010 06:47:27 GMT

hi,

it must be a /etc/default/security file to setup password length ? Can you check it out.

Re: how to enable long passwd in hpux 11.31 OS

Suraj K Sankari — Thu, 29 Apr 2010 07:00:40 GMT

Hi>>But do you have used the depot LongPass11i3.depot
to enable the long passwd

For long passwd you need to convert your system from normal to trusted.

To convert into trusted system system
/usr/lbin/tsconvert

To unconvert the system it will remove the /tcb directory and put the passwords back in the /etc/passwd file.
/usr/lbin/tsconvert -r

Suraj

Re: how to enable long passwd in hpux 11.31 OS

bullz — Fri, 30 Apr 2010 12:50:25 GMT

You need to convert system into trusted mode or wise vers, not sure :(

Re: how to enable long passwd in hpux 11.31 OS

Pavel Lemberk — Fri, 27 May 2011 06:29:53 GMT

Yangk,
there are some prerequisites, but you do not need to convert to trusted system as someone mentioned above.

You need to
-convert passwords to shadow file (if you have not already done so), use /pwconv
-use different password hash algorithm from the traditional DES-based. Install PHI11i3 (Password Hashing Infrastructure). Modify /etc/default/security file, add lines:
CRYPT_ALGORITHMS_DEPRECATE=__unix__
CRYPT_DEFAULT=6
-install LongPass11i3, then modify /etc/default/security file, add line:
LONG_PASSWORD=1

As a result you'll get system with strong password hash algorithm and long passwords supported (up to 255 characters).

Regards,
ple

Re: how to enable long passwd in hpux 11.31 OS

Ismail Azad — Fri, 27 May 2011 10:26:11 GMT

Hi yangk,

With the introduction of SMSE, it's better not to convert to trusted system although the new database normally does not allow this.

However, you have what is termed as LongPassword11i3 which you can download from this link. SMSE normally_does_not support this and converting to trusted should not be the alternative on v3 but the following link.

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=LongPassword11i3

Regards
Ismail Azad