How to configure password age and other settings

[dictum9]

I need to configure the following parameters for some select users (not system-wide), on 11.23 trusted hosts:

1. Min password length
2. Max password Age in days
3. Min password Age in days
4. Password history size
5. Password complexity
6. Account lockout settings

I imagine the command to use is /usr/lbin/modprpw?
I tried via sam but didn't see the option to modify individual users.

[Steven E. Protter · Accepted solution]

Shalom,

/etc/default/security

There is a man page.

SEP

[Ganesan R]

Hi,

First you should convert the system to trusted to set all these features.

[Mel Burslan]

Here is my settings, which seem to satisfy all audits that we have been through so far in the past 2 years:

# grep -v ^# /etc/default/security
ABORT_LOGIN_ON_MISSING_HOMEDIR=1
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=8
PASSWORD_MIN_UPPER_CASE_CHARS=1
PASSWORD_MIN_LOWER_CASE_CHARS=1
PASSWORD_MIN_DIGIT_CHARS=1
PASSWORD_MAXDAYS=91
PASSWORD_MINDAYS=1
PASSWORD_WARNDAYS=7

Hope this helps

[dictum9]

The systems have been converted to trusted hosts.

The problem with /etc/default/security is that it applies to ALL users, but I need to exclude some (application) accounts.

I only want to apply it to _some_ users.

[James R. Ferguson]

Hi:

> The systems have been converted to trusted hosts.

You should be aware that 11.31 is the last release currently scheduled to support the Trusted Base.

You could begin your transition now, by converting to the Shadow Password implementation and evaluating Role-Based-Access-Control and other new features:

http://h20392.www.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

Regards!

...JRF...

[dictum9]

thanks for the note.