topic Re: Password Shadow in Operating System - HP-UX

Password Shadow

Danny Crisp — Wed, 17 May 2006 12:59:45 GMT

Are the following /etc/default/security entries valid for a non-trusted system: -

PASSWORD_MAXDAYS=
PASSWORD_MINDAYS=
PASSWORD_WARNING=

Or does password shadowing need to be installed/configured first?

Re: Password Shadow

Jeff Schussele — Wed, 17 May 2006 13:01:33 GMT

Hi Danny,

Actually you need to convert to Trusted to get the use of those. I don't think just going with shadow PW will do it.

Rgds,
Jeff

Re: Password Shadow

HGN — Wed, 17 May 2006 13:40:28 GMT

Hi

I don't think they are valid for non-trusted system.

Rgds

HGN

Re: Password Shadow

Patrick Wallek — Wed, 17 May 2006 13:51:17 GMT

For definitive information do a 'man security' and read it, especially for those entries you are interested in.

The PASSWORD_MAXDAYS and PASSWORD_MINDAYS do NOT apply to trusted systems (according to the man page). This makes sense since trusted systems have their own mechanism for these two items. So if it does NOT apply to trusted, then it SHOULD apply to untrusted or shadow environments.

The PASSWORD_WARNING applies only to local users on shadow password systems (again according to the man page).

RTFM - (Read The Fine Manpage) -- Man pages are your best friend in any Unix.