How to view password and session security settings

[lauren palmaccio]

Is it possible to view password and session security settings if no /tcb/files/auth/system/default file found, no /etc/shadow file found, and /etc/profile does not show Idle Session Time out. If yes, how?

[James R. Ferguson]

Hi Lauren:

Have a look at your '/etc/default/security' file. Examine the manpages for 'security(4) and for passwd(1)' as they relate to your release. You don't offer the HP-UX release that you are running.

Regards!

...JRF...

[lauren palmaccio]

Version 11.11

[Michael Steele_2]

Hi

Of course. Ever hear the phrase about passing passwords out in the open? That's a network reference. Telnet doesn't use encrypted passwords. This means any network sniffer like tcpdump or etheral can see these passwords by monitoring a port or lan.

[Bill Hassell]

Are you asking if the password can be viewed on the network or are you asking about the various settings for security? Without /tcb (which is a Trusted system) or the shadow password product installed on your system, the settings are very simple. Use the command:

passwd -s userName

This shows the username and security status where status PS=passworded; LK=locked; and NP=no password. If there is a date, then the user has an expiration time. If not, the user's password never expires. see: man passwd