How to reset Password History?

[Kevin Lai_1]

I am running HP-UX B.11.23 (ia64) secured trusted system.

How can I reset my password history while maintain the security setting?

Is there any adverse impact if I remove the files in the /tcb/files/auth/system/pwhist subdirectory?

Thanks

[Steven E. Protter]

Do not remove the files.

Back them up.

Then emtpy them one at at time and test functionality.

Empty

> filename

SEP

[Devesh Pant_1]

Kevin,
make the PASSWORD_HISTORY_DEPTH=0
in your /etc/deafault/security instead of touching anything under the /tcb/files/auth

thanks
DP

[Ermin Borovac · Accepted solution]

Patch PHCO_29249 has the following note:

Resolution:
Modified libpam_unix.1 to ignore one-character encrypted
passwords. This prevents additional corruption of the
password history database, but does not repair an already
corrupted database. To repair a corrupted password history
database it is necessary to remove each file in
/tcb/files/auth/system/pwhist which has a corrupted user
entry, or to remove all files in that directory. This
destroys the password history maintained in those files.
It does not affect the current passwords.

This leads me to conclusion that you can remove the files in /tcb/files/auth/system/pwhist to reset password history.