Password problems

[Debbie Beresford]

We are setting up an new HPUX box running HPUX 11. When the users try to login, some are being prompted to change their passwords, others are not. Also, some users passwords do not appear to work. All users were added through SAM and the force password change box was checked. If the password is changed from the command line using passwd user and then passwd -f user, things appear to work well. I have also noticed if you change a users password and then force them to change it, they can re-enter their old password and there are no error messages. Is there any way to prevent this?

Also, once this system goes live, we need to reset all user passwords. Is trher an easy way to do this as we have 250 users that will need to be changed.

[Mister_Z]

the password aging facility is available under the trusted facility. See the following link to get more information about it:

http://us-support2.external.hp.com/emse/bin/doc.pl/emse/bin/doc.pl?searchtext=trusted+system&hpl=1&todo=search&searchcriteria=allwords&from=forums&searchcategory=ALL&rn=25&presort=rank&source=7000&esc=us-support2.external.hp.com&wpa=forums1.itrc.hp.com%3A80&origin=0&chkServStor=on

[Graham Cameron_1]

A few questions there.

First - are you sure that the force password box was checked for every user you created in SAM? This is a long winded way to create 250 accounts and it could be that there was some finger trouble...

Second - if you want to force them to change their password, *and* you want to prevent them reusing previous passwords, you will have to convert to a trusted system. This is something that is best done via SAM. You can read more about trusted systems here. http://docs.hp.com/hpux/onlinedocs/B2355-90121/B2355-90121.html

When you go live, you want to reset 250 passwords, but what to? You can script a load of passwd -f commands to expire them all, but to change them all would need something like an expect script.

Hope this helps

-- Graham

[Steven E. Protter]

Here is how I did this, to make sure all users got prompted.


file=/root/passwd
cat $file | while read LINE
do
USERID=(echo $LINE | awk -F:'{print $1}')
passwd -f $USERID
done < /root/passwd

Note /root/passwd is a copy of the password file from the old system, compbined with any new users added to the new system.

I don't have access to my scripts so I wrote this right now, there may be a typo or two.


SEP

[RAC_1]

Reset password can be done this way also.

Convert to trusted mode and again to no-trusted mode.

Al paawords expires immediately.