Operating System - HP-UX
1748051 Members
5072 Online
108758 Solutions
New Discussion юеВ

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

 
Roger Mansard
Advisor

Define Min/Max Password length Non-Trusted HP-UX 11.23

I have a customer that is saying HP once provided a means to set the Min/Max password length on a non-trusted system. HP-UX 11.23

8 REPLIES 8
Pete Randall
Outstanding Contributor

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

Do a man on "security". The /etc/default/security file has parameter(s) which control password length: MIN_PASSWORD_LENGTH for one.


Pete

Pete
Roger Mansard
Advisor

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

Yep: I have the Min part.. It's the Max part that I cannot find other than going into the header files and hacking the system.
Roger Mansard
Advisor

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

Yep: I have the Min part.. It's the Max part that I cannot find other than going into the header files and hacking the system. There is a "Security Extension Bundle" kit, but it does not contain Min/Max password length as an option or added feature. I know this workes in 11.31, but they are saying there is a solution for 11.23.
Steven E. Protter
Exalted Contributor

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

Shalom,

Non trusted systems only check the first 8 characters of a submitted password.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Pete Randall
Outstanding Contributor

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

See limits.h (/usr/include/limits.h):

# define PASS_MAX 8 /* max number of significant characters in a
password (not including terminating null) */


Pete

Pete
Roger Mansard
Advisor

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

Thanks Pete... That's what I saw if the customer is willing to do some hacking that will be unsupport.
James R. Ferguson
Acclaimed Contributor

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

Hi Roger:

> Thanks Pete... That's what I saw if the customer is willing to do some hacking that will be unsupport.

Given that That comment regards the 'limits.h' header file, you STILL aren't going to be able to circumvent the limitation since HP doesn't provide/offer any of their source code for you to compile!

Regards!

...JRF...
Roger Mansard
Advisor

Re: Define Min/Max Password length Non-Trusted HP-UX 11.23

The customer said they once received a CD from HP that had something on to use for setting Min/Max password length running 11.23. They are wanting to see if HP can once again provide this mystery resolution. The Mission Crtical customer is running a test of our ability to resolve this issue and this is not bogus. I will keep looking and hopefully come up with the correct solution.