- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- /etc/default/Security with Untrusted
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-10-2007 10:27 PM
04-10-2007 10:27 PM
/etc/default/Security with Untrusted
I convert my system to trusted and password policies was enforced But i revert back to untrust then not a singly policy was working. (Although documentation says that min_passwd_length can work with untrusted system.).
I just want to get confirmation how can i use password policies with untrusted system.
What changes occured in passwd file or effects after migration from trusted to untrust or trust to untrust.
Any idea about these things.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-10-2007 10:36 PM
04-10-2007 10:36 PM
Re: /etc/default/Security with Untrusted
Going from trusted to un-trusted migrates the password information back into the /etc/passwd file with the standard encryption mechanism.
I'd like to see your documentation, because I recall (perhaps incorrectly) that /etc/default/security does not work unless the system is trusted.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-10-2007 10:38 PM
04-10-2007 10:38 PM
Re: /etc/default/Security with Untrusted
Pete
Pete
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-10-2007 10:38 PM
04-10-2007 10:38 PM
Re: /etc/default/Security with Untrusted
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1000150
/etc/default/security should be fully functional on non-trusted systems.
JRF confirms this. I confirm this in the previous thread.
Apologies.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-10-2007 11:01 PM
04-10-2007 11:01 PM
Re: /etc/default/Security with Untrusted
I check it with trusted system all required configuration was working fine. When i convert back to non trusted system and then try to change passwd of any user , it accept the 2 length password. I did't change any file parameters in /etc/default/security.
I am using HP-UX version
HP Release B.11.11 and patch PHCO_27037 is installed as recomended for extra password parameters,
and this configuration parameters is in use in file.
MIN_PASSWORD_LENGTH=7
PASSWORD_HISTORY_DEPTH=3
PASSWORD_MIN_DIGIT_CHARS=1
PASSWORD_MIN_SPECIAL_CHARS=1
kindly check and confirm what else i need to configure it with non trusted system.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-11-2007 12:26 AM
04-11-2007 12:26 AM
Re: /etc/default/Security with Untrusted
So for your list:
> MIN_PASSWORD_LENGTH=7
This is a gray area. The man pages:
security
passwd(1)
passwd(4)
are not conclusive that this item in the security file has any effect. The maximum password size is ALWAYS 8 in a non-trusted system although extra characters beyond 8 are accepted without any error message.
> PASSWORD_HISTORY_DEPTH=3
> PASSWORD_MIN_DIGIT_CHARS=1
> PASSWORD_MIN_SPECIAL_CHARS=1
These are silently ignored in a non-Trusted system. If you upgrade to 11.23 and implement the Security Extensions, then you can regain many of the security file features. See: http://docs.hp.com/en/5991-8711 Note also that Trusted mode is going away after 11.31. See: http://h21007.www2.hp.com/dspp/tech/tech_TechDocumentDetailPage_IDX/1,1701,8231,00.html?jumpid=reg_R1002_USEN
BTW: PHCO_27037 has a warning and has been superseded twice -- the current patch is PHCO_35250. However, it does not mention password length at all.
The attached script will summarize your security settings.
Bill Hassell, sysadmin