HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
cancel
Showing results for 
Search instead for 
Did you mean: 

Password Restrictions

 
Kevin Fiserv
Occasional Visitor

Password Restrictions

On a trusted system running hp-ux 11.23, is it possible to restrict users from setting their password with a specific word in it? Example would be not allowing the word "password" to be any part of their password. Like "pAssword123", OPaSsword", or "Spassword1234". Maybe there is a doc out there I'm not finding. Any help would be appreciated. Thanks.
2 REPLIES
Steven E. Protter
Exalted Contributor

Re: Password Restrictions

Shalom,

HP at http://software.hp.com has a product called Shadow password. It is designed to work like Linux, which uses crack libraries to prevent use of words in passwords.

That might be a better fit than trusted systems.

You can configure trusted systems to require totally random passwords. This can be configured with sam. See man on /etc/default/security

You will really love the number of user complaints that option gets you.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Duc Hoang
Occasional Visitor

Re: Password Restrictions

You should check out "Security Containment" for 11.23 and 11.31 that can be downloaded for free from software.hp.com . With this installed, you will be able to have a lot more of security features without having to convert your servers to TCB (trusted control based)