relax NIS security

[tom quach_1]

Dear all,

i am running NIS on hp-ux 11.11
before i implemented NIS on ths server. i was able to create user with short name and short password (user name with 4 characters and password with 2 letters)
i know that it is not a good practice but i have good reason for it.

is there a way to relax the security on creating and changing username and password for NIS server.

it seems like setting in this file /etc/default/security
does not have any affect on NIS

Thank in advance,
Tom


ex:
Changing password for tomt on NIS server
Old NIS password:
New password:
Password must contain at least two alphabetic characters and
at least one numeric or special character.
New password:
Invalid MIN_PASSWORD_LENGTH in /etc/default/security - valid range is 6-8
Password too short - must be at least 6 characters
New password:
Invalid MIN_PASSWORD_LENGTH in /etc/default/security - valid range is 6-8
Password too short - must be at least 6 characters
Too many failures - try later.
hpux10g1:[root]:/etc/default

[Michael Steele_2]

Dear Tom:

Why don't you try defining the line for

MIN_PASSWORD_LENGTH=2

in /etc/default/security? Here's the man page:

http://www.docs.hp.com/en/B2355-60127/security.4.html

[tom quach_1]

Thanks Michael,

i did that in /etc/default/security
MIN_PASSWORD_LENGTH=2

and here is what i got
Invalid MIN_PASSWORD_LENGTH in /etc/default/security - valid range is 6-8

[A. Clay Stephenson]

While yours is the opposite of what is typically desired, it is possible provided you can spell C. You have all the pieces (specifically the ypasswd() function) to craft your own replaement for the yppasswd command. Man 3N yppasswd for details. Back in the days when NIS was widely used, it was very common to build your own yppasswd command. I have done it many times to customize to whatever level of security is desired.