topic Re: Rejecting valid password change in Operating System - HP-UX

Rejecting valid password change

Jason Deckard — Thu, 04 Apr 2002 17:22:39 GMT

When attempting to update the password to my normal user account (not root), my new password is being rejected although it conforms to password rules.

I have been able to reliably recreate the problem by attempting to change my password to: AbcDefghij123 (NOTE: This is not my current or intended password, but is only an example that recreates the problem). The new password is rejected with the error message: Password must contain at least two alphabetic characters and
at least one numeric or special character.

I am using HP/UX release B.11.00. I appreciate any insight on what I may be doing wrong ;)

Re: Rejecting valid password change

Craig Rants — Thu, 04 Apr 2002 17:24:28 GMT

You don't have a special character in you password. i.e. ? & % something like that...

GL,
C

Re: Rejecting valid password change

A. Clay Stephenson — Thu, 04 Apr 2002 17:24:51 GMT

Generally, anything beyond 8 characters is discarded. You must conform to the rules within the first 8 characters of your password.

Re: Rejecting valid password change

Jason Deckard — Thu, 04 Apr 2002 17:30:30 GMT

Thank you, I know understand why it isn't working (only first 8 are checked against the rules). Is this considered an outstanding issue, or something I just have to live with?

Re: Rejecting valid password change

A. Clay Stephenson — Thu, 04 Apr 2002 17:33:14 GMT

No, it's considered UNIX. Basically, too much legacy code might break if someone fooled with Mother Nature.

Re: Rejecting valid password change

Mark Fenton — Thu, 04 Apr 2002 18:47:27 GMT

Which is why usernames longer than 8 characters have problems as well.

Re: Rejecting valid password change

Jeff Schussele — Thu, 04 Apr 2002 19:08:43 GMT

Hi,

Note also that if you set the system as trusted you can do more with PW security including extending past 8 chars, setting stricter rules for PW construction even have the system generate random syllables/letters/chars & set minimum history depth for PW reusage.

Rgds,
Jeff