Password history lifetime and password history limit

[stepstepvms]

Hi all, I know that the password history lifetime and password history limit are stored in SYS$PASSWORD_HISTORY_LIFETIME and SYS$PASSWORD_HISTORY_LIMIT respectively.

I have tried to show these value the following commands with no succeed:

$ show symbol SYS$PASSWORD_HISTORY_LIFETIME

Would you mind suggesting me how can i obtain the values ?

Thanks a lot and sorry to post such simple question.

[Sandeep Ramavana]

Hi,

SYS$PASSWORD_HISTORY_LIFETIME and SYS$PASSWORD_HISTORY_LIMIT are logicals. You can use

$ SHOW LOGICAL SYS$PASSWORD_HISTORY_LIFETIME
and
$ SHOW LOGICAL SYS$PASSWORD_HISTORY_LIMIT

to view these values. If the logicals are not defined, then the default values are 365 days for SYS$PASSWORD_HISTORY_LIFETIME and 60 for SYS$PASSWORD_HISTORY_LIMIT.

Best Regards,
Sandeep

[John Gillings]

Or, a short cut to see them both at once:

$ SHOW LOGICAL SYS$PASSWORD*

Note that these logical names will only work if defined in the SYSTEM table at EXECUTIVE mode, so to be certain you're seeing the correct definitions, use:

$ SHOW LOGICAL/SYSTEM/ACCESS_MODE=EXECUTIVE SYS$PASSWORD*

When defining these logical names first make sure you have both SYSNAM and SYSPRV privileges


$ SET PROCESS/PRIVILEGE=(SYSNAM,SYSPRV)
$ DEFINE/SYSTEM/EXEC SYS$PASSWORD_HISTORY_LIFETIME "600"
$ DEFINE/SYSTEM/EXEC SYS$PASSWORD_HISTORY_LIMIT "200"

then check that the logical names are in the correct table and with EXEC access mode (there is a bug in DEFINE which silently drops /EXEC if the process lacks SYSNAM privilege. This is documented, but it's still a bug!).