HP-UX Bypass Password Security for Application ID?

[Kojones]

Howdy -

Is there a way to bypass password parameters for certain ID's such at application ID's sitting on the system, without removing the password parameters for the entire user base on the OS?

Example: I want my administrator to have to change his password every 90 days, but I don't want to have to change the application ID on the system every 90 days.

Thanks!

[Dennis Handly]

Is an Application ID a pseudo-user that you use to run an application? And there is an entry in /etc/passwd for that ID?

[Kojones]

Yes and Yes.

[VK2COT]

Hello,

a) An example for Trusted System Password
database (TCB):

# /usr/lbin/modprpw -l -m mintm=0,exptm=0,expwarn=0,lftm=0

b) An example for Shadow password:

# usermod -e ''

Depending on the version of HP-UX,
usermod(1m) takes the following options:

usermod -e "" ...
usermod -e '' ...

c) Or, user SAM and/or SMH to do it via GUI.

Cheers,

VK2COT

[VK2COT]

Ahh,

Too fast typing without thinking.

"usermod -e" is for actual account expiration,
not password!

The command for password expiration is:

# passwd -x -1

From memory, to turn off password aging for
a specific user set the -x option (max age)
to -1. Setting -x to 0 disables aging and
forces a password change at the next login.

Cheers,

VK2COT

[Dennis Handly]

It seems you can't use /etc/default/security if you have these two classes of users.
You'll have to set them explicitly as VK2COT says.