Operating System - HP-UX의 주제 Re: password policy in hp-ux 11.11

password policy in hp-ux 11.11

rajesh73 — Tue, 15 Nov 2011 06:17:55 GMT

Hi,

we have one doubt. where to find the password policy file in hp-ux 11.11

i need below quieries

1.account lock time

2.pasword reuse period

Re: password policy in hp-ux 11.11

Henry Fauni — Tue, 15 Nov 2011 23:06:38 GMT

Are you referring to /etc/default/security file? Do a man on security to get specific details.

Below is an example on one of my servers:

root@oradev03:/etc/default
# cat security
ABORT_LOGIN_ON_MISSING_HOMEDIR=1
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=10
PASSWORD_MIN_UPPER_CASE_CHARS=1
PASSWORD_MIN_LOWER_CASE_CHARS=1
PASSWORD_MIN_DIGIT_CHARS=1
NOLOGIN=1

Re: password policy in hp-ux 11.11

rajesh73 — Wed, 16 Nov 2011 06:00:38 GMT

Hi henrym

Re: password policy in hp-ux 11.11

rajesh73 — Wed, 16 Nov 2011 06:01:35 GMT

hi henry,

thanks for your reply, but in our server /etc/default - location security file not availble.

please advise

Re: password policy in HP-UX 11.11, security(4)

Dennis Handly — Wed, 16 Nov 2011 06:23:02 GMT

>in our server /etc/default - location security file not available.

Then look at security(4) for the defaults.

Re: password policy in HP-UX 11.11, security(4)

rajesh73 — Wed, 16 Nov 2011 09:07:29 GMT

hi dennis,

thanks for your reply, where i can see security file

Re: password policy in HP-UX 11.11, security(4)

Dennis Handly — Wed, 16 Nov 2011 23:49:57 GMT

>where I can see security file

security(4) is short for: man 4 security

Re: password policy in hp-ux 11.11

Bill Hassell — Thu, 17 Nov 2011 15:53:02 GMT

There is no security file in /etc/default unless you create it. You choose the items you want to control using the man page for security. Otherwise, the password features use the defaults.

NOTE: If you have a standard security system (not a Trusted system), there are only two controls: password expiration and number of weeks before the password can be changed again. There is no history (password resuse) and no lockout (infinite retries are allowed). If you have the directory /tcb, then you have a Trusted system and you can control many different settings. Use SAM to look at the current settings and then change them as needed. The /etc/default/security settings will affect all users. SAM can also set global settings for all users as well as modify settings for a specific user.