Password policies on HP-UX 11.11?

[Kenneth Platz]

Hello everyone,

I've got a customer here migrating from a Solaris server, and we're about to get our monthly security audit (I just found out about this today). We need to be able to show the auditors the following:

Password lengths > 6 characters
Minimum time to change password > 1 day
Warn before password expiration = 14 days
Passwords expire after 90 days

We've enabled the trusted system to get the min time, warning, and expiration features, but how do we set up a minimum password length? Also, on the Solaris system, they could just show the auditors a copy of the /etc/shadow file, which had the password aging fields in there -- is there any easy way of extracting this information (preferably on a single screen) on HP-UX?

Thanks in advance...

[Pete Randall]

Look at /etc/default/security (man security).


Pete

[Sanjay_6]

Hi,

Looks at the "MIN_PASSWORD_LENGTH " parameter in the /etc/default/security file.

Hope this helps.

Regds

[Sanjay_6]

Hi Kenneth,

Maybe this link from itrc would help you in identifying when the password is expiring for a user on a trusted system.

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000074740865

The itrc doc id is USECKBAN00000934

Hope this helps.

Regds