topic Re: User Managemtn Problems in Operating System - HP-UX

User Managemtn Problems

raiden — Mon, 10 Aug 2009 10:03:30 GMT

In one of my Itanium Server I m facing below Issues.The system is trusted.

1. Login access is denied, when password is set is more then 8 characters.
2. User can login to the server, even when admin lock is applied for the id.
3. User id is not locked even after 3 consecutive login attempts failures.
4. When ‘passwd –f userid ‘ is applied and User changes password on 1st login then current login session exits, but User can login next time with changed password.

Here we have below setting in /etc/default/security file .

NUMBER_OF_LOGINS_ALLOWED=3
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=5
PASSWORD_MIN_UPPER_CASE_CHARS=1
PASSWORD_MIN_LOWER_CASE_CHARS=1
PASSWORD_MIN_DIGIT_CHARS=1
PASSWORD_MIN_SPECIAL_CHARS=1
PASSWORD_MAXDAYS=90
PASSWORD_WARNDAYS=7

Can some1 please explain how do i resolve this Issues.

Re: User Managemtn Problems

Mel Burslan — Mon, 10 Aug 2009 11:44:28 GMT

What is your HPUX version ? 11.23 or 11.31 ?
Are you up to date with your patching ?
Are the PAM modules installed correctly ?

Re: User Managemtn Problems

raiden — Tue, 11 Aug 2009 01:19:49 GMT

This is HP-UX 11.23
I have Sep 2008 Patch Bundle Installed?
How do i check if the pam modules are installed correctly..

But how does patch and pam modules relates to my problem

Re: User Managemtn Problems

raiden — Tue, 11 Aug 2009 07:00:44 GMT

plz help

Re: User Managemtn Problems

Hakki Aydin Ucar — Tue, 11 Aug 2009 07:12:39 GMT

try this:
swlist -l product |grep -i pam

to see if you have Pluggable Authentication Module in your box.

Re: User Managemtn Problems

raiden — Tue, 11 Aug 2009 08:35:18 GMT

Yes I have PAM installed but still i want to know how pam relates to the problem which i have mentioned.

PAM-Kerberos C.01.24 PAM-Kerberos Version 1.24
PAM-NTLM A.02.02.01 HP NTLM Pluggable Authentication Module
PAMmkdir A.09.00-1.0.001 Home Directory creator
PAMpasswd A.09.00-1.0.2.001 PAM Password Strength Checking Module
PHCO_31618 1.0 libpam_updbe cumulative patch
PHCO_32146 1.0 libpam cumulative patch
PHCO_36742 1.0 libpam_hpsec cumulative patch
PHCO_37076 1.0 libpam_unix cumulative patch

Re: User Managemtn Problems

raiden — Sat, 15 Aug 2009 00:28:03 GMT

the problem is resolved. The aramater "UsePam no" in the sshd_config file was the 1 who created all the mess.

Changed it to yes. Restarted sshd .. Problem solved :)