HPUX user secuirity

[Chandrahasa s]

Hi Masters,

We have recently changed user secuirity parameters in /etc/default/security
PASSWORD_MAXDAYS=60 to PASSWORD_MAXDAYS=30

But when I run command #logins -aox I am not finding this change has not updated to all users.

Requested to help on this.

Also please share info like from where "logins" command takes input.

Chan

[Matti_Kurkela]

The setting in /etc/default/security is only a system-wide default, for those users that don't have a custom password maximum age setting.

The user-specific custom setting (if set for a user) is stored along with the user's password:

- if you use Standard Mode (encrypted passwords in /etc/passwd), the password expiration can be encoded within the encrypted password string. If the password field includes a comma "," it indicates this encoding has been used. See "man 4 passwd" for details about this encoding.

- if you use Trusted System Mode, user-specific password expiration time is specified in the /tcb/files/auth/?/ as "u_exp" and/or "u_life". See "man prpwd" and/or "man modprpw" for more information.

- if you use shadow passwords, the user-specific expiration time is specified by the 5th field of the user record in the /etc/shadow file. See "man 4 shadow" for more information.

MK

[Chandrahasa s]

Hi,

Other then /etc/default/security file option is there any command which can be used to set "password history depth" parameter.

Chan

[點燃]

saludos chan,

is your system a trusted on? If yes, did you try /usr/lbin/modprpw command? You can view the information about a user through /usr/lbin/getprpw command.

If not trusted, there should be some option with the passwd command, or you can use SAM.

[Matti_Kurkela]

If you're using the new shadow password mode, you can make user-specific settings of PASSWORD_HISTORY_DEPTH with:

userdbset -u PASSWORD_HISTORY_DEPTH=

See "man userdbset".

If you're using Trusted System Mode, the system-wide setting in /etc/default/security is the only way to set PASSWORD_HISTORY_DEPTH.

MK