Displaying Password Policy (Non-Trusted System)

[Russell.Wood]

All,

Our auditors would like to see prrof of our password policy on our HP-UX systems. Is there a command/file which displays the password policy (e.g. minimum length, complexity, expiration, etc.)?

We don't have trusted systems and can't convert them due to legacy software.

[TTr]

Show them a printout of "man passwd" and "man 4 passwd". They clearly state the rules about password syntax, expiration etc.

Show them the /etc/passwd file indicating the expiration string. (Note, show them do not give them a printed copy).

Capture the screen dialog of a login with an expired passwd and the passwd change that follows.

[Russell.Wood]

Thanks.

I have also included man security and /etc/default/security.

For future reference for others who would like to know, the method for converting a man page to text is:

man |col -b>page.txt