Operating System - HP-UX
1826437 Members
4080 Online
109692 Solutions
New Discussion

Implement long usernames in HP-UX 10.20

 
SOLVED
Go to solution
Marc_9
New Member

Implement long usernames in HP-UX 10.20

Hello admins,

I would like to know how to implement long usernames (>8 characters)in HP-UX 10.20 if it can be done.

tia,

Marc,
1 REPLY 1
James R. Ferguson
Acclaimed Contributor
Solution

Re: Implement long usernames in HP-UX 10.20

Hi Marc:

You said "username", not "password", but read onward. From Knowledge Base document #KBRC00004673:

/begin_quote/

# man 4 passwd

The current use of this field is derived from its use within the Berkeley Software Distribution. Future standards may define this
field for other purposes.

The following fields have character limitations as noted:

+ Login name field can be no longer than eight characters;
+ Initial working directory field can be no longer than 63 characters;
+ Program field can be no longer than 44 characters.
+ Results are unpredictable if these fields are longer than the limits specified above.

PHCO_22265

The patch text contained the following:(Customer viewable)

The PAM libraries intentionally reject login names which are longer than eight characters. This behaviour is changed from 10.20. Some
customers want a way to bypass this restriction.

Resolution:

libpam_unix.1 now checks for the existence of a file in the /etc/default directory called:
I_ACCEPT_RESPONSIBILITY_FOR_BYPASSING_SECURITY_CHECKS

If this file exists, then login names longer than eight characters can be added to /etc/passwd, and then those users can login. Note the following restrictions:

1. HP has never claimed to support user names longer than eight characters, and does not recommend that customers bypass the existing length checks. Bypassing the existing length checks may cause functional and/or security problems.

(SEE ABOVE OR MAN 4 PASSWD)

2. This patch does not remove the existing user name length checks from other commands - for example, pwck(1m), sam(1m), useradd(1m).

3. Do not enable long user names on trusted system configurations.

Please check the ITRC for latest patches.

/end_quote/

...JRF...