Implementing Password Policy in HP-UX

[Sakthimurugan.S]

Hi,

I have set some of the parameters in /etc/sdefault/security file for implementing the password policy in HP-UX server, after that i dont found the settings are enabled,please suggest me need to start any related services for that.

HP_UX : /etc/default/security

ALLOW_NULL_PASSWORD=0
AUTH_MAXTRIES=5
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=10
PASSWORD_MIN_DIGIT_CHARS=2
PASSWORD_MIN_SPECIAL_CHARS=2
PASSWORD_MAXDAYS=56
PASSWORD_WARNDAYS=7

[rariasn]

Hi,

These parameters apply only if the libpam_unix patch or later is installed.

# swlist -l fileset| grep -i libpam

rgs,

[Sakthimurugan.S]

Yes, its available.
# swlist -l fileset| grep -i libpam
# PHCO_37782 1.0 libpam_unix cumulative patch
# PHCO_38601 1.0 libpam_hpsec cumulative patch

[Sakthimurugan.S]

Is it required to reboot the server or any services.

[rariasn]

Hi,

No.

Non trusted systems only check the first 8 characters of a submitted password

rgs,

[Sakthimurugan.S]

Actually i dont want to enable the trusted mode, but i want to use the customised settings only, that i enabled and teh settings are as mentioned above, when it will take effect?

[rariasn]

Hi,

Some options are only for trusted systems.

It's all ready.

rgs

[Sakthimurugan.S]

What are the parameters are applicable in non trusted system, the below parameters will apply or it support only in trusted mode.

ALLOW_NULL_PASSWORD=0
AUTH_MAXTRIES=5
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=10
PASSWORD_MIN_DIGIT_CHARS=2
PASSWORD_MIN_SPECIAL_CHARS=2
PASSWORD_MAXDAYS=56
PASSWORD_WARNDAYS=7

[rariasn]

Hi:

Read Bill Hassell thread

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1000150

regards,

[Dennis Handly]

>What are the parameters are applicable in non trusted system

See these threads about trusted vs Security Extensions on 11.31:
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1371250
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1368510
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1350031
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1281757
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1214608
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1264007