password policy - query

[Jagadesh_2]

Hi All,

I have a requirement to enable the below security policies in HPUX 11.11/11 servers.

1)Non-numeric in first and last position
2)Maximum consecutive identical character from any position in the previous password
3)Maximum identical consecutive characters

Please let me know how to enable this in trusted and non-trusted system.

Many Thanks
S.Jagadesh

[HGN]

Hi

In SAM

SAM>Accounts for users & groups>select User Modify security policies>password format policies.

Rgds

HGN

[HGN]

Hi

Sorry I misunderstood your question , the previous post may or may not be useful.

Rgds

HGN

[Rick Garland · Accepted solution]

You can set options in the /etc/default/security file (create if doesn't exist)

Options are available to specify password complexity.

As to 1st-last characters, this is not done in the security file. But you can specify the number of non-alpha characters, the number of upper-case characters, etc.

Do a 'man security'

[Bill Thorsteinson]

There are pam modules to verify password
formats. Generally, they check strength
based on number of characters with credits
for numeric, and special characters.
They can also verify that the new password
has is sufficiently different from the
previous one.

libpam_cracklib is one such module.

You can also write your own modules.

Password checking is generally disabled
when root sets the password.

[Raj D.]

Hi Jagadesh ,

First the system needs to be trusted system.
And hope you can do it with /usr/lbin/modprpw , also check for /etc/default/security file. Though I am not sure for the above parameters. check #man modprpw.

To check if the system is trusted , you can do :

# cd /usr/lbin
# ./getprdef -r


hth,
Raj.

[Raj D.]

Hi (again) Jagadesh,

You can check this link for more details for setting up password controls :

http://docs.hp.com/en/B2355-90121/ch02s06.html#d0e3540

Hope this will help.

Cheers ,
Raj.