System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Password composition settings are not appropriate.

fizan
Super Advisor

Password composition settings are not appropriate.

An entry in
/tcb/files/auth/system/default for
“:u_restrict@:” indicates that
triviality checks are not performed.

so to activate the triviality check whether
the configuration should be changed to
“u_restrict” ? help me out..
5 REPLIES
OldSchool
Honored Contributor

Re: Password composition settings are not appropriate.

see the man pages for modprpw. it lists what the various options are for the argms and what they correspond to..

u_restrict applies to generated password only, if I read it correctly.

man page is here:
http://docs.hp.com/en/B9106-90008/modprpw.1M.html
fizan
Super Advisor

Re: Password composition settings are not appropriate.

only for the generated password means? can you plz explain i have to implement it on prodctn box for audit.

1.suppose if an existing user asks to reset the passwd then after a reset it will ask for entering complex passwd from the user?

2.or it will take effect for new users only?passwd complex..
OldSchool
Honored Contributor

Re: Password composition settings are not appropriate.

"system generated password" system set password for user and tells them what it will be.

if you need rules for password construction, that will depend on trusted / non-trusted, settings in the "security" file

depending on the OS version, various soltions apply. an accurate description of the goal to be attained would be helpful. and define what your auditor(s) mean by "trivial".
Steven E. Protter
Exalted Contributor

Re: Password composition settings are not appropriate.

Shalom,

I'd use sam to set that. Your system is trusted, and though that technology ends with 11.31 HP-UX system generated passwords by default are still maddeningly random.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
OldSchool
Honored Contributor

Re: Password composition settings are not appropriate.

SEP...While that would be correct, I've got a feeling is that what he really in need of is to set up password construction requirements for non-system genterated passwords (hence the request for clairification).