password policy

[sheevm]

We are running 11.0 HP-UX. Currently this is non trusted system. I want to enforce the following password policy:

Min 7 Char
atleat one numeric and one special char.

Can someone give me some tips and best way of doing this?

Thanks in Advance

[RAC_1]

man 4 security

You can prepare the /etc/default/security file to enforce the requirements. If you do have man page for it, you need to install a patch that introduced this file.

Anil

[Pete Randall]

With the latest patches, your 11.0 system can specify this in the /etc/default/security file with the paramaters MIN_PASSWORD_LENGTH and PASSWORD_MIN__CHARS. See man security.


Pete

[Sanjay_6]

Hi,

you can do this by forcing the restriction using the file /etc/default/security

Try this link from itrc,

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000076534451

The itrc doc id is KBRC00011604.

Hope this helps.

regds

[Pete Randall]

The patches, if you don't have them, are:

http://www2.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.pdb|patch.breadcrumb.search|&patchid=PHCO_27721&context=hpux:800:11:00
http://www2.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.pdb|patch.breadcrumb.search|&patchid=PHCO_29249&context=hpux:800:11:00


Pete

[sheevm]

Thanks to all of you for the response.

Pete,

Can I enforce the password policy by just converting it to trusted system? or it can only be done via security file?

[Pete Randall]

Either way will accomplish what you want. Converting to a trusted system will add a lot more than just your relatively simple requirements, that's why the /etc/default/security file was developed: it's a way to implement a few of the features of trusted systems without going through all the bother of converting to trusted.


Pete