topic Re: passwd aging and forcing passwd change doesn't work at all in Operating System - HP-UX

passwd aging and forcing passwd change doesn't work at all

arking1981 — Tue, 17 Feb 2009 01:46:06 GMT

Hello,

I found the passwd aging and forcing passwd change at next login didn't work at all in my system.
My test was to execute command line like:
"passwd -r files -f -x 14 -n 7 student1"
Meaning: force student1 to establish a new password on the next login which will expire in 14 days and prohibit the user from changing the password until 7 days have transpired.

But when I login with student1 at next time, I was not asked to update the passwd.

I have done some search here and found no matching topic, so I post this question.
Can anyone provide some help?

Thanks in advance.

Regards
arking

Re: passwd aging and forcing passwd change doesn't work at all

Steven E. Protter — Tue, 17 Feb 2009 02:58:28 GMT

Shalom,

What is on passwd -sa

What is in /etc/default/security

SEP

Re: passwd aging and forcing passwd change doesn't work at all

Hakki Aydin Ucar — Tue, 17 Feb 2009 08:54:14 GMT

try this:
# passwd -n 0 -x 14

by the way; Which version of HP-UX ?

Re: passwd aging and forcing passwd change doesn't work at all

Hakki Aydin Ucar — Tue, 17 Feb 2009 09:14:25 GMT

Options:

-f Force the user to change the password on the next login
EXAMPLE: passwd -f username

-n Specify a minimum password life time (the password cannot be changed during this time)
EXAMPLE: passwd -n1 username

-x Specify a maximum password ((the password must be changed after this time and password aging may vary
between 1 and 158 days)
EXAMPLE: passwd -x158 username

-l Lock a password so the user cannot login
EXAMPLE: passwd -l username

Re: passwd aging and forcing passwd change doesn't work at all

Jose luis Martinez Esca — Thu, 19 Feb 2009 16:45:48 GMT

hi arking

only one question are you using Trusted System, SMSE o no security policies in your system?

ch2

Re: passwd aging and forcing passwd change doesn't work at all

arking1981 — Fri, 20 Feb 2009 09:07:09 GMT

Hi,

Thanks all for your response.
The system is HP-UX 11i.
It isn't using a trusted system

Now the problem seems related with SSH login. When I used telnet to login, the passwd was requested to change because of expiry. But for SSH login, it didn't.

Is the SSH corrupted?
Maybe I need to re-install it?

Regards
arking

Re: passwd aging and forcing passwd change doesn't work at all

Ganesan R — Fri, 20 Feb 2009 09:42:03 GMT

Hi,

SSH login also should say password expired and ask the user to change the password. Because SSH and telnet is same as far as authentication is concern.

If the account is configured with password less login then ssh login may not work I hope.

What is the error you are getting when you login through ssh?

Re: passwd aging and forcing passwd change doesn't work at all

Matti_Kurkela — Fri, 20 Feb 2009 09:58:57 GMT

Which version of SSH?

I seem to recall that old versions had some problems in password aging support.

Get the latest version of SSH from software.hp.com for free. Read the release notes before installing: the newer versions of SSH have some patch requirements for some HP-UX versions.

MK

Re: passwd aging and forcing passwd change doesn't work at all

arking1981 — Mon, 23 Feb 2009 01:32:00 GMT

Hi,

Re Ganesan R:
The error was no expiry nofication at the next login after enabling the "force passwd change at next login".
And can you explain what is "configured with password less login"? I don't understand it. Thanks.

Re Matti Kurkela:
Maybe the version is too old:
> what /usr/bin/ssh
/usr/bin/ssh:
HP92453-02A.11.00 HP-UX SYMBOLIC DEBUGGER (END.O ILP32) $Revision: 75.02

As we have other machines with "$OpenSSL A.00.09.07i" installed and it was ok.

If my version too old?
Thanks

Best regards,
arking

Re: passwd aging and forcing passwd change doesn't work at all

Dennis Handly — Mon, 23 Feb 2009 11:51:44 GMT

>HP92453-02A.11.00 HP-UX SYMBOLIC DEBUGGER (END.O ILP32) $Revision: 75.02

This is the version of end.o, used with -g, useless.

Re: passwd aging and forcing passwd change doesn't work at all

arking1981 — Thu, 26 Feb 2009 02:15:57 GMT

Thanks all.
It's because the SSH installed too old

Re: passwd aging and forcing passwd change doesn't work at all

arking1981 — Thu, 26 Feb 2009 02:20:21 GMT

I have found a solution to this question as seen in the comments below.