username with more than 8 character in 11i

[Efim Kushnir]

Hello all.

How can I add a user which has more than 8 characters. Im running hp-ux 11i.

In docs and on it site I see info about possibility do it less than 64 characters on 10.20 and 11.0 version.

How can I do it on 11i ?

BR,
Efim

[Radhakrishnan Venkatara]

hi,

check this links

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x10920cb17a32d5118fef0090279cd0f9,00.html

http://bizforums.itrc.hp.com/cm/QuestionAnswer/0,,0x70b8cf38d6bdd5118ff10090279cd0f9,00.html

[Robert-Jan Goossens]

Hi Efim,

Could you give us some info on why you want to do this ?

Take a look at next question.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x15d168da2286d711abdc0090277a778c,00.html

Hope it helps,

Robert-Jan.

[Efim Kushnir]

Hi Robert-Jan,
it not my caprice :-))

It requirements of our jBase DB's admin.

Efim

[Robert-Jan Goossens]

Hi Efim,


Searched a bit,

for 11.0 you need PHCO_24838

The PAM libraries intentionally reject login names which are longer than 8 characters. This behaviour is changed from 10.20. Some customers want a way to bypass this restriction.

I know you are on 11.i, but if you look at the HP-UX 11.00 Patch Equivalency Status for HP-UX 11.11

PHCO_24838:libpam and libpam_unix cumulative patch PHCO_24839

So basicly you would need PHCO_24839. If you take a look at the patch there is no specific info on solving this problem. Call HP support and ask them.

Hope it helps,

Robert-Jan.

By the way, we share the same hobby :-)

[Steven E. Protter]

You can add the user but might not want to. Same deal with passwords in excess of 8 characters.

There are certain circumstances in which characters beyond number 8 will be ignored.

You will think you are using the right user name or password but the system will tell you sorry.

The limits on a trusted system are set in sam(though I'm sure you can do some kind of command line magic.) Its in the Users area.

SEP

[Bill Hassell]

Please show the links above to your jBase DBAs. Your system is going be a very BIG problem to administer, and certainly will have issues with security. Unix has an 8char limit...it is not based on any Microsoft product and trying to jam-fit Unix into some other operating system rules is going to be a big sysadmin nightmare. The issues will always be compatibility problems and there is no way to predict all the issues that will show up in the future.

[John Payne_2]

I asked this once, and an overly helpful HP engineer suggested the patch PHCO_21833, and said that I would need to touch the following file: /etc/default/"I_ACCEPT_RESPONSIBILITY_FOR_BYPASSING_SECURITY_CHECKS". (Like was said in one of the links...)

I think the patch says that there a bunch of incompatabilities with commands like useradd, sam, etc.

We once created a userid greater than 8 characters. All was fine until the password expired. Then the user couldn't get in. We tried to reset the password for them, but they still were not able to get in. pwck complained about the 'logname is too short/long' but no other errors were found. We just changed the userid to 8 characters. (Left the same uid.)

Bill is right, Windows thinking doesn't always fit well with UNIX actualities. (Something about a square peg in a round hole...)

Hope it helps

John

[Efim Kushnir]

Dear all,

thank you for help and advices.

Regret I can't try do it because my DB's admin don't want decrease of security.

Thanks,
Efim

[Pete Randall]

Efim,

Don't regret it. This is the best thing that could have happened. You really don't want to compromise your system by exceeding the 8 character limit.


Good luck



Pete