risks of trusting a system

[Adam Noble]

Hi all,

We have a number of systems that are still untrusted. The systems are critical production servers and I am wary of trusting them. There is a lot of ftp activity (yes ftp sorry) and I seem to recall that often users can be prompted to change there password and ftp accounts can be disabled. Can somebody confirm this?

Thanks

[F Verschuren]

yes you can go trusted and disable all the checks, befor you are making the system trusted make sure all the users have a 8 diget passwd.

[Adam Noble]

I have just tested on another system. I have a userid and I set the password to sic and then trust it. I am still able to login with that password and am not prompted to change it.

[Jeeshan]

Do you enable password aging policy?

enabling this you can specify how often the system will prompt you to change the password.

[Adam Noble]

I notice password ageing is initially disabled, so if I enable that will all users be initially prompted to change there password?

[Anshumali]

till you select
[ ] Expire All User Passwords Immediately
Answer should be no

Anshu

[James R. Ferguson]

Hi Adam:

Trusted mode is deprecated beginning at 11.31. A number of features can be added at 11.23 to the so-called "standard" mode with this product:

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=StdModSecExt

Regards!

...JRF...