PAM modules

[JJ de Haas]

Hi,

Does anyone know if the pam_hpsec module that's in HP-UX 11.23 is also available for HP 11.11 and 11.00?

I would like to be able to use all the /etc/default/security file options on all our HP systems.

Tips on other PAM modules that do the same (and are maintained/supported) are also quite welcome.

Thanks,
Jan.

[Simon Hargrave]

Which specific feature are you requiring?

If you read the man page for security on an 11.11 and on an 11.23 box, features on 11.23 that require pam_hpsec (NOLOGIN, NUMBER_OF_LOGINS_ALLOWED etc) are supported in 11.11 without the need for pam_hpsec.

My guess would be that this functionality was broken out into a separate PAM library in 11.23 onwards and was part of the standard authentication (perhaps in a different pam module, or hard coded into login etc?)

[Denver Osborn]

It's a new pam module introduced with 11i v2.

http://docs.hp.com/en/5990-8153/ch08s12.html

-denver

[JJ de Haas]

Definitely want to implement the password rule set options (minimum number of lower/uppercase chars, digits and special chars).

Also minimum password length and password history would be nice to have.

I might get the same fuctionality from another (OS?) module, but if possible I'd like to stick with the vendor specific module.

Thanks,
Jan.

[George Liu_4]

I am afraid libpam_hpsec is not available on 11i or earlier version

[JJ de Haas]

Yes, that's what I was afraid of. I'll see what's available in OS.

Thanks,
Jan.