cancel
Showing results for 
Search instead for 
Did you mean: 

Minlen password C2 TRU64 5.1A

SlopeZ
Frequent Advisor

Minlen password C2 TRU64 5.1A

Hi all,

i've installed a new ds20E machine
with tru64 5.1A (no patch kit yet).

i've configured the Enhanced Security and now
the choosen password (option 4 to pick the password on passwd) minlen it's set to 9:

arinsal.tsm.inet> passwd user
Old password:
Last successful password change for user: Thu Feb 10 18:04:29 CET 2005
Last unsuccessful password change for un25410: Thu Feb 10 18:27:07 CET 2005


Do you want (choose one option only):

1 Pronounceable passwords generated for you
2 A string of characters generated for you
3 A string of letters generated for you
4 To pick your password

Select ONE item by number: 4

You have selected:
To pick your password

New password:
Password must be from 9 to 80 characters long.

Illegal password, try again.
New password:

i'm trying to change this value (minlen 9) to 8, but i can't find where is the default value.

I search into this file:
#more/etc/auth/system/default

default:\
:d_name=default:d_pw_expire_warning#3456000:d_pw_site_callout=/tcb/bin/pwpolicy:d_boot_authenticate@:\
:d_secclass=c2:\
:d_admin_preexpire_psw:d_skip_ttys_updates@:d_auto_migrate_users:d_max_vacation_future#0:\
:d_max_vacation_duration#0:d_accept_alternate_vouching@:d_skip_success_login_log@:d_skip_fail_login_log@:\
:d_null_psw_prompt#0:\
:u_pwd=*:u_owner=:u_priority#0:u_cmdpriv=boot,ping,printerstat,tape:\
:u_syspriv=execsuid,chmodsugid:\
:u_basepriv=execsuid,chmodsugid:\
:u_audcntl#0:u_auditmask=:u_minchg#0:u_minlen#0:\
:u_maxlen#10:u_exp#15724800:u_life#31449600:u_pickpw:\
:u_genpwd:u_restrict@:u_policy:u_nullpw@:\
:u_pwdepth#5:u_genchars:u_genletters:u_newcrypt#0:\
:u_maxtries#5:u_lock:u_unlock#86400:u_expdate#0:\
:u_vacation_start#0:u_vacation_end#0:u_max_login_intvl#0:u_grace_limit#0:\
:u_psw_change_reqd@:u_gen_site:u_minchosen#0:u_maxchosen#80:\
:\
:t_maxtries#10:t_logdelay#2:t_lock@:t_unlock#86400:\
:\
:chkent:

I find the u_minchosen set to 0.

Where is the 9 default value configured?

Thanks in advance.

Saints!
3 REPLIES
SlopeZ
Frequent Advisor

Re: Minlen password C2 TRU64 5.1A

Hi again,

i think i find the solution:

When the value of minchosen is 0 the default value it's set by the Green Book convenion (ej. 9)

I've set this value to 8 and now works fine!

It's that correct?

Thanks all.
Saints!
Ann Majeske
Honored Contributor

Re: Minlen password C2 TRU64 5.1A

Yes, if you set the minlen to 0 it defaults to the US DOD requirements, aka the "orange book".

For information on all of the fields see "man prpasswd" and "man default". To display the contents of the default and the auth (user specific entries) databases you should use the edauth tool (see "man edauth") or the GUI.

Ann
SlopeZ
Frequent Advisor

Re: Minlen password C2 TRU64 5.1A

Hi all,

i hope this topic help another people.

Thanks all.

Saints!