Rejecting valid password change

[Jason Deckard]

When attempting to update the password to my normal user account (not root), my new password is being rejected although it conforms to password rules.

I have been able to reliably recreate the problem by attempting to change my password to: AbcDefghij123 (NOTE: This is not my current or intended password, but is only an example that recreates the problem). The new password is rejected with the error message: Password must contain at least two alphabetic characters and
at least one numeric or special character.

I am using HP/UX release B.11.00. I appreciate any insight on what I may be doing wrong ;)

[Craig Rants]

You don't have a special character in you password. i.e. ? & % something like that...

GL,
C

[A. Clay Stephenson]

Generally, anything beyond 8 characters is discarded. You must conform to the rules within the first 8 characters of your password.

[Jason Deckard]

Thank you, I know understand why it isn't working (only first 8 are checked against the rules). Is this considered an outstanding issue, or something I just have to live with?

[A. Clay Stephenson · Accepted solution]

No, it's considered UNIX. Basically, too much legacy code might break if someone fooled with Mother Nature.

[Mark Fenton]

Which is why usernames longer than 8 characters have problems as well.

[Jeff Schussele]

Hi,

Note also that if you set the system as trusted you can do more with PW security including extending past 8 chars, setting stricter rules for PW construction even have the system generate random syllables/letters/chars & set minimum history depth for PW reusage.

Rgds,
Jeff