maintaining Password History

[Mehmood Ansari]

Is there is way to maintain password history, not to use last three password on untrusted system.

Regards

[Ranjith_5]

What we do @ our place is maintaining a password file for the server and keep a password for the same file.


regards,
Syam

[Mehmood Ansari]

My question is system should refused, if you assigned another password it should not accept as saying that previously you had used this password.

[Robert-Jan Goossens]

Hi,

Sorry not possible, you will need to run a trusted system. Passwd history is kept in the tcb database which is created when you convert to a trusted system.

Best regards,
Robert-Jan

[Ranjith_5]

Sorry sir,
Its not possible. That is the security of a trusted system.

regards,
Syam

[Camel_1]

if you have trusted system, set PASSWORD_HISTORY_DEPTH=3 in /etc/default/security

[Mic V.]

Somewhere, possibly in the 4th edition of "Programming Perl," I remember seeing a perl script to implement this. If you force users to run your script (which then calls the real program), it could be done. Of course, there are potential problems with doing it this way...

Mic