maximum password age not set

[san_intel3]

We have a security policy which is monitored by axent scripts...

Whenever we run these axent scripts it will list out all the vulnerabilities on the system...
According to this each account should have maximum pwd expire time as 90 days.. So we set the pwd age to 90 days to all accounts.

There is one more vulnerability saying minimum password history is disabled to get ridof this
we created security file with
PASSWORD_HISTORY_DEPTH=4

So when we created the /etc/default/security file it reverted all the changes made for password aging.....means now they dont have max. passwd age as 90 days but showing some other values...

So May I know is there any relation betwwn /etc/default/securtiy file and password aging????

[Steven E. Protter]

Shalom,

Back up the file right after you change it.

You may have some global setting in sam for all users overridding what you put in the file.

SEP