topic /tcb/files/auth/system/default in Operating System - HP-UX

/tcb/files/auth/system/default

Carme Torca — Mon, 20 Jun 2011 06:11:58 GMT

Hi,

I have thrusted one system and now I have to create new users with 49 and 7 chars.

#passwd -x 45 -w 7
#passwd -sa

prova1 PS 12/31/69 0 49 7

What I have to change to do this?

[22]cat /tcb/files/auth/system/default
default:\
:d_name=default:\
:d_boot_authenticate:\
:u_pwd=*:\
:u_owner=root:u_auditflag#-1:\
:u_minchg#0:u_maxlen#8:u_exp#0:u_life#0:\
:u_pw_expire_warning#0:u_pswduser=root:u_pickpw:u_genpwd:\
:u_restrict@:u_nullpw@:u_genchars@:u_genletters:\
:u_suclog#0:u_unsuclog#0:u_maxtries#3:u_lock:\
:\
:t_logdelay#2:t_maxtries#10:t_login_timeout#0:\
:chkent:

Thanks a lot of,
Carmen.

Re: /tcb/files/auth/system/default

JohnFjeldberg — Wed, 20 Jul 2011 06:43:33 GMT

Not quite sure what 7 and 49 refers to, but instead of manupilating the default file diretly perhaps consider to use the trusted default tools:

/usr/lbin/getprdef
/usr/lbin/modprdef -m field

They are not actually documented in the man pages, but modprdef takes most of the same arguments as modprpw (see man page) e.g:

lftm=value Set password life time interval (days). 0 =infinite.

exptm=value Set password expiration time interval (days).0 = expired. Same as non-trusted mode maximum time.

Hope that helps.JF

Re: /tcb/files/auth/system/default

FreekVerschuren — Tue, 30 Aug 2011 07:24:27 GMT

in th epast you used:

passwd -x 45 = max passwd age (in weeks)

passwd -w 7 = warning (in weeks)

for trusted servers:
to get this use:

/usr/lbin/getprpw -m exptm,expwarn

to set them:

modprpw -m exptm=315 "username"

and

modprpw -m expwarn=49

ps TO BE OBSOLETED