topic Re: how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value in Operating System - HP-UX

how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value

eric wang_2 — Tue, 25 May 2010 04:56:40 GMT

I have two HP-UX 11.11 ,I would like to set trust mode /tcb/files/auth/system/default,
like MIN_PASSWORD_LENGTH ASSWORD_HISTORY_DEPTH,
I cannot found how to set those values in trusted mode.I only find set password max length
no,min password length setting.
Where is the min password length value.

Does it need to install patch or
if I creat a file /etc/default/security and set like MIN_PASSWORD_LENGTH ,PASSWORD_HISTORY_DEPTH,
Is it work in trusted mode or /etc/default/security file only work on standard system mode?

Re: how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value

Prasanth V Aravind — Tue, 25 May 2010 05:43:03 GMT

MIN_PASSWORD_LENGTH & PASSWORD_HISTORY_DEPTH you ave to set in /etc/default/security, if its trusted one.

check this link.

http://docs.hp.com/en/B2355-90696/security.4.html

Gudluck
Prasanth

Re: how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value

Kapil Jha — Tue, 25 May 2010 05:53:46 GMT

its secirity file
/etc/default/security

check man security it has all the parameters.

BR,
Kapil+

Re: how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value

eric wang_2 — Tue, 25 May 2010 06:01:07 GMT

thanks for your reply,
but HP-UX 11iv1 no /etc/default/security files
how to set the value.if i create the /etc/default/security set those value ,is it work?

I would like to know /etc/default/secuirty is only use in standard system mode or trusted system mode, or trusted mode also reference /etc/default/security files if trusted mode cannot set some parameter like password depth

Re: how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value

Prasanth V Aravind — Tue, 25 May 2010 06:05:27 GMT

You have to create /etc/default/security & add these entries.

it will work on 11.11

Gudluck
Prasanth

Re: how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value

Prasanth V Aravind — Tue, 25 May 2010 06:20:03 GMT

>>I would like to know /etc/default/secuirty is only use in standard system mode or trusted system mode, or trusted mode also reference /etc/default/security files if trusted mode cannot set some parameter like password depth

/etc/default/secuirty can use on both modes.
but password history depth supports only on trusted mode.

seems these threads may be helpful for you.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=816953

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=182477

Gudluck
Prasanth

Re: how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value

eric wang_2 — Tue, 25 May 2010 08:08:41 GMT

so, I summary above,
in HP-UX 11iv1 PASSWORD_HISTORY_DEPTH only support in trusted mode,not in standard mode,
but HP-UX 11iv2 and 11iv3
PASSWORD_HISTORY_DEPTH support both tursted mode and standard system mode.

MIN_PASSWORD_LENGTH support both tursted mode and standard system mode.

Is that right,what i say?
because I need to get default security policy in trusted mode and standard system mode,in HP-UX 11iv1 HP-UX 11iv2 .HP-UX 11iv3

thanks

Re: how to get and set HP-UX 11iv1 trusted mode and non trusted mode system default value

eric wang_2 — Wed, 26 May 2010 10:35:35 GMT

thanks for all responser, I need to read man 4 security man manual