HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

How to configure password age and other settings

 
SOLVED
Go to solution
dictum9
Super Advisor

How to configure password age and other settings


I need to configure the following parameters for some select users (not system-wide), on 11.23 trusted hosts:

1. Min password length
2. Max password Age in days
3. Min password Age in days
4. Password history size
5. Password complexity
6. Account lockout settings

I imagine the command to use is /usr/lbin/modprpw?
I tried via sam but didn't see the option to modify individual users.
6 REPLIES
Steven E. Protter
Exalted Contributor
Solution

Re: How to configure password age and other settings

Shalom,

/etc/default/security

There is a man page.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Ganesan R
Honored Contributor

Re: How to configure password age and other settings

Hi,

First you should convert the system to trusted to set all these features.
Best wishes,

Ganesh.
Mel Burslan
Honored Contributor

Re: How to configure password age and other settings

Here is my settings, which seem to satisfy all audits that we have been through so far in the past 2 years:

# grep -v ^# /etc/default/security
ABORT_LOGIN_ON_MISSING_HOMEDIR=1
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=8
PASSWORD_MIN_UPPER_CASE_CHARS=1
PASSWORD_MIN_LOWER_CASE_CHARS=1
PASSWORD_MIN_DIGIT_CHARS=1
PASSWORD_MAXDAYS=91
PASSWORD_MINDAYS=1
PASSWORD_WARNDAYS=7

Hope this helps
________________________________
UNIX because I majored in cryptology...
dictum9
Super Advisor

Re: How to configure password age and other settings

The systems have been converted to trusted hosts.

The problem with /etc/default/security is that it applies to ALL users, but I need to exclude some (application) accounts.

I only want to apply it to _some_ users.

James R. Ferguson
Acclaimed Contributor

Re: How to configure password age and other settings

Hi:

> The systems have been converted to trusted hosts.

You should be aware that 11.31 is the last release currently scheduled to support the Trusted Base.

You could begin your transition now, by converting to the Shadow Password implementation and evaluating Role-Based-Access-Control and other new features:

http://h20392.www.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

Regards!

...JRF...
dictum9
Super Advisor

Re: How to configure password age and other settings


thanks for the note.