password history in trusted system

[YLTan]

How to initialize the password history file at
/tcb/files/auth/system/pwhist

[T G Manikandan]

check the DOCID KBRC00000915 for the information

[YLTan]

I can't find the DOC KBRC00000915. Can you post it here.

thnx

[YLTan]

I am trying to allow users to re-use their password again. Any way to re-init the password history database?

[Zeev Schultz]

Here I think

http://docs.fc.hp.com/hpux/onlinedocs/B2355-90742/00/00/61-con.html#bjeihgbe

[K.Vijayaragavan.]

It is controled by the "PASSWORD_HISTORY_DEPTH=n" field in /etc/default/security file.

[Darren Prior]

Hi,

There isn't a way that I'm aware of for re-initializing pwhist. The point of the file is to prevent users from reusing old passwords. The format of the file isn't published, so I'd be hesitant to suggest you remove entries from it.

As a freshly trusted system doesn't contain this dir, you could consider removing it. The other alternative is to set the password history depth to 1 and see if that clears the file.

regards,

Darren.

[YLTan]

I still can't access the following site for the docs.

http://docs.fc.hp.com/hpux/onlinedocs/B2355-90742/00/00/61-con.html#bjeihgbe

can someone help?

[Darren Prior]

Can you get to http://docs.hp.com ? If so, you can find the "Managing Systems and Workgroups: A guide for HP-UX system administrators" book and then flip through the contents for "Managing Standard Passwords and System Access " which is what the link pointed to.

I didn't see any mention of pwhist there though.

fyi - docs.hp.com is an openly available site, whereas the KBRC doc id listed in an earlier post is from the Knowledge Database on the ITRC - you'll need to have a valid system handle from your contract linked to your ITRC profile to view these areas (which is why the docs from there cannot be posted onto the forums.)

regards,

Darren

[yogesh_4]

you can try , in /etc/default/security set "PASSWORD_HISTORY_DEPTH=1 which may help .