Password Restrictions on Trusted Systems

[Tony Schmidt]

I am running hpux 11.0 in trusted mode. I can set the history_depth and min/max characters in the /etc/default/security file. But I have a requirement to use at least one UPPER-case character in the passwd file. How can I do this?

Thanks,
Tony

[Alex Glennie · Accepted solution]

I think you'd need to install the latest PAM patch for 11.00 and 11.11.

PHCO_25527 : s700_800 11.00 libpam and libpam_unix cumulative patch

extract from :

A site's security policies sometimes require new passwords
to contain specific numbers or types of characters, such as
at least two digits and at least one special character. Resolution:
In addition to the standard password requirements,
optional entries in the file /etc/default/security specify
the minimum number of required characters of each type
(upper case characters, lower case characters, digits
and special characters) in a new password. PASSWORD_MIN_UPPER_CASE_CHARS=N
PASSWORD_MIN_LOWER_CASE_CHARS=N PASSWORD_MIN_DIGIT_CHARS=N
PASSWORD_MIN_SPECIAL_CHARS=N
The default value for N is 0. These parameters have
effect only when a password is changed. On untrusted
systems, these parameters do not apply to the root user.
The file /etc/default/security should be owned by root and
have 0644 permissions.
As an example, to require passwords at least 8 characters
long, composed of at least 5 upper case characters, 2
lower case characters and a digit, include the following
lines in /etc/default/security, as specified above:
PASSWORD_MIN_UPPER_CASE_CHARS=5 PASSWORD_MIN_LOWER_CASE_CHARS=2
PASSWORD_MIN_DIGIT_CHARS=1