how to view password setting for a trusted system?

[PamelaJThrasher]

I recently made changes to the system-wide settings for some of my trusted servers using the modprdef command. I changed:
- null passwords not allowed
- minimum time interval between password changes
- password life time interval
- password expiration time interval
- password expiration warning time interval
- maximum number of unsuccessful logins
- maximum time between last loging and current login

I made these changes in response to an audit of our servers. The auditors are now asking for proof that these changes have been made.

Is there a command that will list the system wide settings for a trusted server?

Thanks.
Pam

[AL_3001 · Accepted solution]

Hi Pam,

You can check the default file in:

/tcb/files/auth/system

Cheers,
AL

[Sunny123_1]

Hi

You can view this in /etc/default/security file.


Regards
Sunny

[Richard Hepworth]

Hi Pam,

You can check each one as follows:

- null passwords not allowed:
/usr/lbin/getprdef -m nullpw

- minimum time interval between password changes:
/usr/lbin/getprdef -m mintm

- password lifetime interval:
/usr/lbin/getprdef -m lftm

- password expiration time interval:
/usr/lbin/getprdef -m exptm

- password expiration warning time interval:
/usr/lbin/getprdef -m expwarn

- maximum number of unsuccessful logins:
/usr/lbin/getprdef -m umaxlntr

- maximum time between last loging and current login:
Not sure about this one!

regards,

Richard

[Vivek Bhatia]

Hi Pamela,

yes,

Run "/usr/lbin/getprpw username" and you will see all the changes you have set as a default on this server.

Regards
Vivek

[ManojK_1]

What vivek is mentioned (/usr/lbin/getprpw ) is the best way to find the system wide settings for user in a trusted systems.

#man getprpw

above command will give you more details and the meaning of the output /usr/lbin/getprpw .

Thanks and Regards,
Manoj K

[Sivakumar MJ._1]

In Support off AL300, please check the link

http://docs.hp.com/en/B9106-90011/default.4.html

[Suraj K Sankari]

Hi,
getprpw is the command or else you can ask the auditor to login into the system and do all this means set
- null passwords
- minimum time interval between password changes
- password life time interval
- password expiration time interval
- password expiration warning time interval
- maximum number of unsuccessful logins
- maximum time between last loging and current login

if he will fail then you did the changes.

suraj

[Sajjad Sahir]

Dear Friend

getprpw is the command to displays the user's protected password database settings.


thanks and regards

Sajjad Sahir

[PamelaJThrasher]

.