User Managemtn Problems

[raiden]

In one of my Itanium Server I m facing below Issues.The system is trusted.

1. Login access is denied, when password is set is more then 8 characters.
2. User can login to the server, even when admin lock is applied for the id.
3. User id is not locked even after 3 consecutive login attempts failures.
4. When ‘passwd –f userid ‘ is applied and User changes password on 1st login then current login session exits, but User can login next time with changed password.


Here we have below setting in /etc/default/security file .

NUMBER_OF_LOGINS_ALLOWED=3
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=5
PASSWORD_MIN_UPPER_CASE_CHARS=1
PASSWORD_MIN_LOWER_CASE_CHARS=1
PASSWORD_MIN_DIGIT_CHARS=1
PASSWORD_MIN_SPECIAL_CHARS=1
PASSWORD_MAXDAYS=90
PASSWORD_WARNDAYS=7



Can some1 please explain how do i resolve this Issues.

[Mel Burslan]

What is your HPUX version ? 11.23 or 11.31 ?
Are you up to date with your patching ?
Are the PAM modules installed correctly ?

[raiden]

This is HP-UX 11.23
I have Sep 2008 Patch Bundle Installed?
How do i check if the pam modules are installed correctly..

But how does patch and pam modules relates to my problem

[raiden]

plz help

[Hakki Aydin Ucar]

try this:
swlist -l product |grep -i pam

to see if you have Pluggable Authentication Module in your box.

[raiden]

Yes I have PAM installed but still i want to know how pam relates to the problem which i have mentioned.

PAM-Kerberos C.01.24 PAM-Kerberos Version 1.24
PAM-NTLM A.02.02.01 HP NTLM Pluggable Authentication Module
PAMmkdir A.09.00-1.0.001 Home Directory creator
PAMpasswd A.09.00-1.0.2.001 PAM Password Strength Checking Module
PHCO_31618 1.0 libpam_updbe cumulative patch
PHCO_32146 1.0 libpam cumulative patch
PHCO_36742 1.0 libpam_hpsec cumulative patch
PHCO_37076 1.0 libpam_unix cumulative patch

[raiden]

the problem is resolved. The aramater "UsePam no" in the sshd_config file was the 1 who created all the mess.

Changed it to yes. Restarted sshd .. Problem solved :)