passwd command non trusted 11.11 system

[tuffa1]

Hello.
We did a patch over the weekend. We used to be able to assign the password to the same as the userid...Yeah, i know, not secure, but it is needed for one username we have...
Now that the patch has been applied, when we try to set the password to the same as the userid, we get the error message "Password cannot be circular shift of logonid "
Any ideas?

[Pete Randall]

Have you tried doing this as root?

i.e.: passwd [userid]


Pete

[Jaime Bolanos Rojas.]

Tuffa,

you are probably either using the same username as the password, or using similar characters to the old password.

Those rules are enforced by c-2 security, so I do not think it will be posible to do that anymore unless you go back to the state the machine was before the patch.

Regards,

Jaime.

[tuffa1]

yes, tried both with sam and root. either way, get the same message.

[Peter Godron]

HI,
please read the warnings in this solution:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=951863
Also, have you tried setting password on user using hte root account?

[tuffa1]

It is a non trusted system, so I was under the understanding that you would be able to set the username and password to the same thing, such as username fred and password fred. I have tried this from the # sign as root and also under sam.

[Jaime Bolanos Rojas.]

Tuffa,

If it's a non-trusted system, what is the name of the patch that you installed?

Regards,

Jaime.

[Steven E. Protter]

Shalom,

As noted above root can break all rules for passwords. It doesn't matter if your system is trusted or not, it is possible to set password complexity requirements in /etc/defaults/security configuration.

SEP

[tuffa1]

There isnt anything in the security file...
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=0
SU_DEFAULT_PATH=/sbin:/usr/sbin:/usr/bin
NOLOGIN=1

updates were a4ux1111_app.depot
online diag support tools software bundle update
a4ux11.11 - os patch
a4ux1111_pdc-fw - firmware install for pdc gsp and mp