topic Re: password aging in Operating System - HP-UX

password aging

fizan — Thu, 23 Jul 2009 10:56:11 GMT

Enable password aging for unix logins.

Set 'Maxage' value to 8.

how to set this value?

Re: password aging

Sunny123_1 — Thu, 23 Jul 2009 11:06:30 GMT

Hi

If you are running trusted system then look out for /tcb/files/auth/system/default file

Regards
Sunny

Re: password aging

fizan — Thu, 23 Jul 2009 11:15:50 GMT

default:\
:d_name=default:\
:d_boot_authenticate@:\
:u_pwd=*:\
:u_owner=root:u_auditflag#-1:\
:u_minchg#0:u_maxlen#8:u_exp#15724800:u_life#16934400:\
:u_pw_expire_warning#604800:u_pswduser=root:u_pickpw:u_genpwd:\
:u_restrict@:u_nullpw@:u_genchars@:u_genletters:\
:u_suclog#0:u_unsuclog#0:u_maxtries#3:u_lock:\
:\
:t_logdelay#2:t_maxtries#10:t_login_timeout#0:\
:chkent:

Re: password aging

Mel Burslan — Thu, 23 Jul 2009 11:15:55 GMT

OS Version ?
Trusted or not ?

You have not given much information to answer your question.

Re: password aging

Sunny123_1 — Thu, 23 Jul 2009 11:20:20 GMT

Hi

Also look for the /etc/default/security file.

and refer following and set it in that file

PASSWORD_MAXDAYS
If the ShadowPassword bundle is installed, this parameter controls the default maximum number of days that passwords are valid. This parameter applies only to local users and does not apply to trusted systems. The passwd -x option can be used to override this value for a specific user.

PASSWORD_MAXDAYS=N A new password is valid for up to N days, after which the password must be changed.

Regards
Sunny

Re: password aging

Prashantj — Thu, 23 Jul 2009 11:24:54 GMT

Hi fizan,

You can use SAM for password aging.follow the method.
Go to the SAM -> Account for User and Group-> NIS User -> select any user & go to the Action Menu, select â Modifyâ
Change â No restrictions (Normal Behavior)to Enable password Aging.
After that set the password expiration Time (weeks)and Min. Time Between Password changes (Weeks)

Hope this will help you.

Regards
Prashant

Re: password aging

fizan — Thu, 23 Jul 2009 12:21:28 GMT

thanks for one n all involved in this issue.