Password Management

[Allan_6]

Currently I face a problem with reflection x and HPux, for some reason I can define user's and give them certain privilages but when it comes to setting up user accounts where the user MUST change password on a monthly basis it doesn't allow me, so it turn I have a super user account that basically gives user's to many privliages. I have tried software like tarentella and Sudo but they offer no way out as tarentella is having problems with another application we run, and as the problem is not really in the true mean an administrative problem, it's more of a security issue.

Does anyone know what avenues I can take?

[Michael Tully]

Hi,

What you are looking for is a product called 'sudo' It is free and easy to configure. You can get the source at
http://www.courtesan.com/sudo/

or binary at
http://hpux.connect.org.uk/

HTH
-Michael

[Mark van Hassel]

Hi Allan,

You can set passwd aging in SAM, but have to convert to a trusted system first:
Choose "Auditing and Security" - "System Security Policies". This will let you convert to a trusted system. Now you can configure passwd aging : system wide (via the system security policies) or per user (via the user menus in SAM).

Hope this helps.

[Darrell Allen]

Actually you can use password aging on a system without it being in trusted mode. Thru SAM, select the user, take Action -> Modify, then Modify Password Options, and Enable Password Aging.

Darrell

[Philip P. Hartl]

You can also set up restricted sam instances to distribute many admin tasks.

Run sam with -r option, select tasks to be allowed and the account to allow. When that user executes sam only the allowed tasks will show in the sam menu.