Operating System - HP-UX
1836562 Members
3282 Online
110102 Solutions
New Discussion

Re: Protected passswd database

 
san_intel3
Occasional Advisor

Protected passswd database

If u_exp parameter is set to zero(u_exp=0) what does it mean? does it mean password aging is not set??
In /tcb/files/auth/system file u_exp=967680 and for a user say abc the u_exp=0 parameter is set to zero in the file /tcb/files/auth/a/abc

Can you let me know whether for abc user password age has been set or not?? My intention is what parameter abc user will consider?? Is it system default or its own settings??
1 REPLY 1
Mridul Shrivastava
Honored Contributor

Re: Protected passswd database

The user-specific aging policies are different from the system-wide policies because those users have their own u_minchg and u_exp entries. Those accounts will not use the system-wide defaults defined in the
/tcb/files/auth/system/defaults file.

Use the System Administration Manager (SAM) to modify the aging policies for those users who do not have the system-wide aging policies. Modify those accounts so that they use the system default.

Once you modify the aging policies to use the default, the u_minchg and u_exp entries will not appear in the user's tcb file. As a result, these accounts will now use the system-wide defaults defined in
/tcb/files/auth/system/defaults.

Use these commands to determine which users have their own aging policies:

1. Change directories to /tcb/files/auth.

2. Execute this find command:

find . -type f -exec grep -il "u_exp" {} \;

Note: Ignore any files that you find in /tcb/files/auth/system.
Time has a wonderful way of weeding out the trivial