Passwd settings

[Joel Pavon]

Hi!

I have two quesitons about the passwd configuration,

1) How can I Force the long of the passwd at less 8 characteres whiout using trusted system?

2) How can I configure the SHADOW PASSWD?

I??m using a HP-UX 11.0

Please Help me!

[A. Clay Stephenson · Accepted solution]

The short answer to both is that you can't. The shadow password only has meaning in a trusted environment.

If you are a C programmer then you can code your own replacement for passwd and/or yppasswd and put whatever rules and policies you like into the passwd command.

[Justo Exposito]

Hi Joel,

You must convert your system to a trusted system, you can do it with SAM.

Regards,

Justo.

[Joel Pavon]

I??m Install a Path PHKL_24276 on the server, this patch is necesari to convert to trusted system, when I try co convert toi trusted system whit SAM, apear the next message:


Note: VxFS file systems do not currently support Access Control
Lists (ACLs). If you currently have one or more VxFS file systems in
use, these file systems will not contain ACLs after conversion to
Trusted Systems.

Do you want to continue?
What meas this message?
I have VXFS File systems whitout OnlineJFS software.

Tnks!

[A. Clay Stephenson]

That is simply a warning. ACL's are Access Control Lists and are a form of extended permissions that became available fairly recently on Vxfs filesystems. They have been available for a very long time on hfs filesystems. If you have to ask about these, I'm am all but positive that you have no ACL's to be concerned about. The use of ACL's is no longer common at all.

[David Lodge]

The answers above are nearly right :-)

>1) How can I Force the long of the passwd at >less 8 characteres whiout using trusted >system?

You can actually do this on trusted and non-trusted systems using the /etc/default/security file, just add the line:
MIN_PASSWORD_LENGTH=8
to the end of it. Note, this does require IIRC December 2000 patches to work.

>2) How can I configure the SHADOW PASSWD?

On HP you can't. The /etc/shadow file, commonly found on Sun, Linux etc doesn't exist on HP. If you set the system to Trusted (/usr/lbin/tsconvert) then HP will store all priveledged account information (including password) in the /tcb structure.

dave