Security of password

[Eric Jacklin]

Hi team,

we have HP ux 11.11 running on our server and i would like to enable below mention security on the existing account so how should i do that ?



Password length 8 chars minimum.
Passwords are alpha numeric
Password depth 12 minimum
Automatic timeout after a period of inactivity

[Pete Randall]

I believe most, if not all, of this can be set up in the /etc/default/security file. See "man security" for details.


Pete

[Eric Jacklin]

/etc/default/security file is not there in the location

Is it due to PAM ?
if yes, then what is the alternate

[Pete Randall]

The file itself was not there on 11.11 - you can simply create it. In case you don't have the man page, it can be found here:

http://www.docs.hp.com/en/B2355-90909/B2355-90909.pdf


Pete

[Eric Jacklin]

I am still bit confused on the file creation part

Becasue i have checked the account through SAM and it is using some basic password security.

So with out security file how those setting sare being operated now.

In addition would you please let me know after creating a /etc/default/security file do i need to carried out any further steps

[Jeeshan]

or you can set it through SAM -> Auditing and Security ->System Security Policies.

[Bill Hassell]

There are three main places to maintain security policies: /etc/default/security which does not exist and must be created. Use the command:

man security

Then add the lines you want into this file. The second location is SAM where the global security settings are under the SAM section for all new users. And the third location is also in SAM where you can alter the policy settings for individual users.

Now, once you change the password policy, it has no effect on the current passwords. The new rules apply only when the user changes their password. But you can force a user to change their password the next time they login using modprpw (man modprpw).

Finally, NONE of your requirements can be specified unless you have your system Trusted. The keywords in the security file are silently ignored in non-Trusted systems.

[SKR_1]

System should be trusted first, then you can set all these policies with the help of sam.

[Khairul_1]

Hi Jit's
You can do the above on trusted system.
Automatic timeout you need to do following:

Edit /etc/profile
#vi /etc/profile

export TMOUT=600 #Telnet session timeout 10 minutes i.e. 60x10=600

Check the Timeout:
#echo $TMOUT

Please assing point who are reply your question.
Thanks
Khairul
Bangladesh