Password composition settings are not appropriate.

[fizan]

An entry in
/tcb/files/auth/system/default for
“:u_restrict@:” indicates that
triviality checks are not performed.

so to activate the triviality check whether
the configuration should be changed to
“u_restrict” ? help me out..

[OldSchool]

see the man pages for modprpw. it lists what the various options are for the argms and what they correspond to..

u_restrict applies to generated password only, if I read it correctly.

man page is here:
http://docs.hp.com/en/B9106-90008/modprpw.1M.html

[fizan]

only for the generated password means? can you plz explain i have to implement it on prodctn box for audit.

1.suppose if an existing user asks to reset the passwd then after a reset it will ask for entering complex passwd from the user?

2.or it will take effect for new users only?passwd complex..

[OldSchool]

"system generated password" system set password for user and tells them what it will be.

if you need rules for password construction, that will depend on trusted / non-trusted, settings in the "security" file

depending on the OS version, various soltions apply. an accurate description of the goal to be attained would be helpful. and define what your auditor(s) mean by "trivial".

[Steven E. Protter]

Shalom,

I'd use sam to set that. Your system is trusted, and though that technology ends with 11.31 HP-UX system generated passwords by default are still maddeningly random.

SEP

[OldSchool]

SEP...While that would be correct, I've got a feeling is that what he really in need of is to set up password construction requirements for non-system genterated passwords (hence the request for clairification).