topic Re: Minimum Password Lenght on HP-UX 10.20 in Operating System - HP-UX

Minimum Password Lenght on HP-UX 10.20

Obie Oberholster — Thu, 03 Aug 2000 09:35:18 GMT

Can anybody tell me where I can change the setting for the minimum password lenght. By default it is set to 6. SAM allows you to only set the maximum, but I think the minimum is as important, if not more to set.

Secondly I need to restrict the re-use of old UID's. I cannot find anywhere in SAM to do this.

Any comments will be welcome.

Regards
Obie

Re: Minimum Password Lenght on HP-UX 10.20

Vladislav Demidov — Thu, 03 Aug 2000 10:04:30 GMT

The feature of setting minimun password length is available only when you are using authentication database.

Re: Minimum Password Lenght on HP-UX 10.20

Brian M. Fisher — Thu, 03 Aug 2000 10:19:40 GMT

If your system hase been converted to trusted, the Maximum Password Length setting defines how many characters are allowed in system-generated passwords, this limit does NOT apply to user-specified passwords. As far as setting a minimum length, I do not know of a way within the shipped HP-UX. A better precation is to regularly run a password cracking program, such as Crack or John the Ripper, against your passwords to look for weak ones.
As far as restricting the use of old UID's, the way I work around this problem is to never remove a login from the system, the accounts are just disabled.

Brian
<*(((>< er

Re: Minimum Password Lenght on HP-UX 10.20

Duane Gorder — Mon, 07 Aug 2000 12:55:24 GMT

Regarding duplicate UIDs, we were fortunate to have a five digit corporate ID number, so we use those for UIDs, and let the Human Resources department worry about not allowing duplicates.

Re: Minimum Password Lenght on HP-UX 10.20

Rick Garland — Mon, 07 Aug 2000 15:02:03 GMT

Re-using UIDs is not recommended. Disable the acct that is no longer in use and the UID will not be used again. This for disabled accts. If you remove the acct from the system, the UID is available.

Use a script that will indicate to you what is the 1st available UID that you can use. You can also put some logic into it that will specify a range of UIDs that are available by the user's default group membership.

Re: Minimum Password Lenght on HP-UX 10.20

RDCanada — Mon, 07 Aug 2000 18:06:34 GMT

Disabling the accounts will work fine until account # 1301, with 1300 maximum accounts in the password file.