root's password policy

[Danesh Qureshi]

I have serveral servers running Red Hat advance server 3 and Advance server 4.

Can anyone tell me where do I find root's password policy?

Where do I lookup root's password length (what is the minimum and maximum length for password, where is root's password expiry displayed, what the threshold is before root account is locked, if root has password history and if password dictionary feature is set up?

[dirk dierickx]

you can look up these things with the 'passwd -S ' command.

[Steven E. Protter]

Shalom,

Linux uses cracklib to check for keywords and such with the root password and when root is used to set passwords.

History is also easy to implement.

There is no way to enforce a password policy on the root user. That is an organizational issue.

root for very good reasons can override any password policy you set for users, both for itself and other users.

There are valid reasons to override rules. Policy for root is a people issue and getting them to comply with organizational security guidelines.

SEP

[skt_skt]

"chage -l root" would give some password aging relate information