Sam and password options

[Monica Goodson]

I'm trying to establish new user accounts using sam on a system running HPUX 11. I startup sam, click on Accounts for users/groups, and then click on users. I select "add" from the actions menu. I enter the appropriate information. I notice there is not a button stating "select password options". Therefore, when new users log in for the first time they are never prompted to change their password. I've installed the latest sam patch (PHCO_21845)but it didn't do the trick. Any help would be greatly appreciated.

Thanks,
Monica

[Bruce Regittko_1]

Hi,

You must be on a trusted system. SAM does not display the "Set password options..." button if you have a trusted system.

--Bruce

[Dan Hetzel]

Hi Monica,

Using sam on a trusted system, you may change the password policies (and others) under 'Auditing and Security'->'System security policies'. That's global for the system.

If you want to modify the password policies at a user level, go to 'Accounts for Users and Groups', select a user and all you need is in the 'Actions' menu.

Best regards,

Dan

[Sandor Horvath_2]

Hi !

Edit the password file /etc/passwd and add the next 3 digit after the crypted password ,..

It will work without trusted system.

regards, Saa

[Monica Goodson]

Hi Bruce, Dan and Saa.

Bruce, I am not using a trusted system. We are running NIS.

Dan, I am able to change user passwords using sam...my problem is I never see the button that says "Set password options". We have another 11.00 system that was setup during the same time frame and it has the "Set password options" button. I would like to force new users to change their passwords upon initial login to the system or old users to change their passwords if I've had to issue them one time passwords.

Saa, what 3 digits are you referring to?

Thanks again,
Monica

[Bruce Regittko_1]

Hi,

What Saa is suggesting is placing a comma and two periods after the 13 character encrypted password string in /etc/profile. Characters after the password string define password aging. The .. will cause the password to be expired forcing the user to select a new one.

--Bruce

[Dan Hetzel]

Hi Monica,

You don't see the button if your system is in 'trusted mode'.
Most probably, one of your servers must be 'trusted' and the other isn't.
This explains the differences in 'sam' display.

That's why I was giving you the way to achieve the same thing on the trusted system (through the 'Action' menu - see here above)

Best regards,

Dan

[Sandor Horvath_2]

Hi !

Bruce thanks your answer in my stead.
Monica if You have NIS You can do what I supposed but only nis master server and after this modification use ypmake passwd.

By the way
Never use NIS with trusted system. Check it please.


regards, Saa