system generated list of password reset

[Jojo Castro]

Is there a way I can extract the history of password reset from a trusted mode HP-UX 11.23?
Our audit keeps on asking us this questions quarterly... help please!

Thanks!

[Bill Hassell]

There is nothing in HP-UX to track the use of the passwd command or for a Trusted system, modprpw. If the auditors require this record keeping, then a system administrator procedure must be created (script typically) that logs the date/time, the login, the sysadmin and the results of the change. Naturally, this only works if everyone follows the rules. To be really paranoid, you could rename the modprpw command and create the script as a wrapper for modprpw.

[Vijaykumar_1]

Hi,

Moreover you cannot reset a password with modprpw. Its used to set password attributes only.

The commands can be extracted from shell history..but i dont think so there is such an option for password resets.