implementing password aging on my 11.31 trusted servers

[PamelaJThrasher]

Hello-
I am going to be implementing password aging on my 11.31 trusted servers. There are several system and application accounts that I do not want to have their passwords expire. I am planning to run the following command against the accounts whose passwords I do not want to expire:

/usr/lbin/modprpw -m mintm=0,exptm=0,expwarn=0,lftm=0,llog=0

Do I need to run this for the root account to keep my root password from expiring?

Thanks in advance

[Steven E. Protter · Accepted solution]

Shalom,

Easiest thing to do is run the sam replacement, smh, choose accounts and disable password aging.

You do need to run this command against root to prevent aging.

However that might cause you to fail a security audit.

Note also that trusted system is deprecated, will not be used in 11iv4 HP-UX. There are alternatives you might want to consider available on http://software.hp.com

SEP

[PamelaJThrasher]

Thank you for the great information.

If an password expires, will the account then also be locked? Or will it just prompt the user to change the password?

[melvyn burnard]

With 11iv3 you could also look at SMSE Standard Mode Security Extensions.
This allows individual security settings to be applied on a per user basis without going to Trusted mode.

[Johnson Punniyalingam]

>>If an password expires, will the account then also be locked? Or will it just prompt the user to change the password?<<

Yes, Your account will be locked.

You need enable the account, Than try login than only It will prompt the user to Change the password

Thkx,
Johnson

[Johnson Punniyalingam]

Do I need to run this for the root account to keep my root password from expiring?

Yes,

yo enable the locked account.

/usr/lbin/modprpw -k

Thanks,
Johnson

[PamelaJThrasher]

.