password aging in HPUX 11.31

[Lucy2009_1]

Our server is a none trusted running hpux 11.31. I have turned on password aging for some accounts. I have set PASSWORD_WARNDAYS=14 in /etc/default/security file. However the security file says it works for Shadow mode only:

# Shadow mode only: number of days prior to
# password expiration to give a warning
# PASSWORD_WARNDAYS=14

So even I uncommented the above line, it will not work?

I also tried command "userdbset" but got this error:

# userdbset -u PASSWORD_WARNDAYS=14
Unknown attribute : PASSWORD_WARNDAYS

Your input is appreciated.

Thanks in advance,
Lucy

[Michael Steele_2 · Accepted solution]

PASSWORD_WARNDAYS
".. This parameter applies only to local users on Shadow Password systems. .."

So, you need to use shadow passwd file.

See the 'pwconv' command.

DESCRIPTION
The pwconv command installs or appends /etc/shadow with information from /etc/passwd, or
checks for any discrepancies between the contents of the two files.
The pwconv command without options does the following:
1. Creates the file /etc/shadow if it does not exist; otherwise, it removes all entries for usernames
which are not present in /etc/passwd.
2. For each entry in /etc/passwd, move the encrypted password and aging information to
/etc/shadow. Entries in /etc/passwd which have no encrypted password or aging information
will not overwrite information in /etc/shadow.
3. Writes an "x" in each password field of the /etc/pa

[Kranti Mahmud]

Hi Lucy,

Check the below links:

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1070331

http://www.docs.hp.com/en/B2355-90121/ch02s06.html

Rgds-Kranti

[Lucy2009_1]

Thanks all.