min passwd length and password history length in a trusted system

[skt_skt]

HP-UX 11.11

which file decides the passord history length in a trsuted system ( /tcb/files/auth/system/default or /etc/default/security?)

I dont see a history property defined in /tcb/files/auth/system/default.

Also what is the min passwd length in a trusted system.I dont see that configured in /tcb/files/auth/system/default

[/root] cat /etc/default/security
PASSWORD_HISTORY_DEPTH=6

[/root] cat /tcb/files/auth/system/default
default:\
:d_name=default:\
:d_boot_authenticate@:\
:u_pwd=*:\
:u_owner=root:u_auditflag#-1:\
:u_minchg#604800:u_maxlen#12:u_exp#5184000:u_life#7776000:\
:u_llogin#7776000:u_pw_expire_warning#1728000:u_pswduser=root:u_pickpw:\
:u_genpwd:u_restrict:u_nullpw@:u_genchars@:\
:u_genletters:u_suclog#0:u_unsuclog#0:u_maxtries#5:\
:u_lock:\
:t_logdelay#2:t_maxtries#5:t_login_timeout#30:\
:chkent:


Let me know if you already knew answers to that.

[Pete Randall]

According to the man page for security:

"The password history depth configuration is on a system basis and is supported in trusted system for users in files repository only."

That's awkwardly worded but I think it tells me that /etc/default/security controls this setting.


Pete

[Pete Randall · Accepted solution]

Sorry, forgot the second part of your question. Once again the man page seems to indicate, at least to me, that /etc/default/security would control the min password length:

"New passwords must contain at least N characters. For untrusted systems, N can be any value from 6 to 8. For trusted systems, N can be any value from 6 to 80."


Pete

[Court Campbell]

For minimum password length use MIN_PASSWORD_LENGTH in /etc/default/security. By default it is 6. "man security" should answer a lot of your questions.