program to check for poor passwords

[Asad Malik]

Hi
Is there any software available from HP or third party which can be used on HP-UX 11.00
to check for easily detectable/poor passwords.
there are programs like COPS and crack but are their binaries for 11.00 available on the web and where.
Thanks

[RikTytgat]

Hi,

crack is at http://hpux.cae.wisc.edu/hppd/hpux/Sysadmin/crack-5.0/

This is a 10.10 version, but the source code will probably compile on 11 too.

Hope this helps,
Rik.

[Alan Riggs]

Try:

http://hpux.cae.wisc.edu/hppd/hpux/Sysadmin/crack-5.0/

Download source and compile it on your box.

[Adrian Voysey]

You can use Crack on HP systems.
This is a shareware product which checks password entries against dictionaries for valid words .
You can get crack from
ftp.uu.net/archive/pub/security/crack_4.1-tar.Z

[Anthony Goonetilleke]

Its pretty easy to compile if you are having problmes just install gcc and binutils and you should be fine. Most sysadmins install these on there systems anyway in order to compile gnu software.

[Rick Garland]

Numerous dictionaries are available for Crack as well. Employees on H1B visas have often used their names as passwd - alot of time there are not in the English dictionary so Crack would not find them. Input the different dictionaries found a bunch more.

[Rick Garland]

Numerous dictionaries are available for Crack as well. Employees on H1B visas have often used their names as passwd - alot of time there are not in the English dictionary so Crack would not find them. Input the different dictionaries found a bunch more.

[Bill Hassell]

Be very cautious about using crack before you have high level management agreement. In some countries, guessing a password (what crack does) can be an invasion of privacy.

And in some cases, a misguided manager might think that this activity is a direct violation of a company's security policy. Best to get written approval (even if you are the system admin with the root password) as some sysadmins have had bad results in the past.

[Kevin Griesmar]

I would like to recommend using Enterprise Security Manager (ESM) made by Axent.
It is a very resourceful product and has many features for running security reports on Login parameters, network integrity, passwords, etc.. check them out.

http://www.axent.com/Axent/Public/

[Asad Malik]

Is there any tool/command that comes with HP-UX 11.00 whose functionality resembles these third party programs

[Asad Malik]

Is there any tool/command that comes with HP-UX 11.00 whose functionality resembles these third party programs

[Richard Mertz]

I have used Crack. I have switched to John--it is faster. You can get it at:

http://www.openwall.com/john/

No program from HP that I am aware of.

For both Crack and John, you will need gcc and the binutils available at the HP porting archive

http://hpux.cs.utah.edu/

RIchard