Operating System - HP-UX
1748123 Members
3323 Online
108758 Solutions
New Discussion юеВ

Re: how to enable long passwd in hpux 11.31 OS

 
yangk
Frequent Advisor

how to enable long passwd in hpux 11.31 OS

Dear All,

Do you how to enable the long passwd the hpux 11.31 OS ? Now the default max passwd length is 8 bits.

Thanks!

Kevin,
9 REPLIES 9
Kapil Jha
Honored Contributor

Re: how to enable long passwd in hpux 11.31 OS

do u have truested server.
******************
passwords must contain at least N characters. For untrusted systems, N can be any value from 6 to 8.
For trusted systems, N can be any value from 6 to 80.
*****************

If you have trueted system you can update it in /etc/security file.

BR,
Kapil+
I am in this small bowl, I wane see the real world......
singh sanjeev
Trusted Contributor

Re: how to enable long passwd in hpux 11.31 OS

check what is the password length parameter in /etc/default/security

MIN_PASSWORD_LENGTH
This attribute controls the minimum length of new passwords. On trusted systems it applies to all users. On standard systems it applies to non-root local users and to NIS users. The system-wide default defined here may be overridden by defining per-user values in /var/adm/userdb (described in userdb(4)).

MIN_PASSWORD_LENGTH=N New passwords must contain at least N characters. For standard systems, N can be any value from 3 to 8. For trusted systems, N can be any value from 6 to 80.

Default value: MIN_PASSWORD_LENGTH=6
Sanjeev Singh
Kapil Jha
Honored Contributor

Re: how to enable long passwd in hpux 11.31 OS

man security for more information

security(4)

/etc/default/security is the file.

BR,
Kapil+
I am in this small bowl, I wane see the real world......
yangk
Frequent Advisor

Re: how to enable long passwd in hpux 11.31 OS

Dear All,

Thank you very much!

But do you have used the depot LongPass11i3.depot
to enable the long passwd?

Maybe it should change the pam.conf file.

Thanks!
Hakki Aydin Ucar
Honored Contributor

Re: how to enable long passwd in hpux 11.31 OS

hi,

it must be a /etc/default/security file to setup password length ? Can you check it out.
Suraj K Sankari
Honored Contributor

Re: how to enable long passwd in hpux 11.31 OS

Hi>>But do you have used the depot LongPass11i3.depot
to enable the long passwd

For long passwd you need to convert your system from normal to trusted.

To convert into trusted system system
/usr/lbin/tsconvert

To unconvert the system it will remove the /tcb directory and put the passwords back in the /etc/passwd file.
/usr/lbin/tsconvert -r


Suraj
bullz
Super Advisor

Re: how to enable long passwd in hpux 11.31 OS

You need to convert system into trusted mode or wise vers, not sure :(
Pavel Lemberk
New Member

Re: how to enable long passwd in hpux 11.31 OS

Yangk,
there are some prerequisites, but you do not need to convert to trusted system as someone mentioned above.

You need to
-convert passwords to shadow file (if you have not already done so), use /pwconv
-use different password hash algorithm from the traditional DES-based. Install PHI11i3 (Password Hashing Infrastructure). Modify /etc/default/security file, add lines:
CRYPT_ALGORITHMS_DEPRECATE=__unix__
CRYPT_DEFAULT=6
-install LongPass11i3, then modify /etc/default/security file, add line:
LONG_PASSWORD=1

As a result you'll get system with strong password hash algorithm and long passwords supported (up to 255 characters).

Regards,
ple
Ismail Azad
Esteemed Contributor

Re: how to enable long passwd in hpux 11.31 OS

Hi yangk,

With the introduction of SMSE, it's better not to convert to trusted system although the new database normally does not allow this.

However, you have what is termed as LongPassword11i3 which you can download from this link. SMSE normally_does_not support this and converting to trusted should not be the alternative on v3 but the following link.

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=LongPassword11i3

Regards
Ismail Azad
Read, read and read... Then read again until you read "between the lines".....