Setting max days to 9999 on root.

[Jason Irons_1]

The maximum max days that can be set with "passwd -x" is 441.

Any ideas how to change this? I'd like to get it to 9999, this would keep it in line with the other OS's which are supported.

The other option is to disable password aging for root.

Appreciate your suggestions

Cheers

Jason

[Viktor Balogh]

is your system trusted? what is the output of the following?

# /usr/lbin/getprdef -r

Do you have the shadow password product installed?

# swlist -l product ShadowPW

Look for the /etc/default/security file!

# grep -v ^# /etc/default/security | grep -v ^$
ABORT_LOGIN_ON_MISSING_HOMEDIR=1
MIN_PASSWORD_LENGTH=8
PASSWORD_HISTORY_DEPTH=8
PASSWORD_MIN_UPPER_CASE_CHARS=1
PASSWORD_MIN_LOWER_CASE_CHARS=1
PASSWORD_MIN_DIGIT_CHARS=1
PASSWORD_MAXDAYS=91
PASSWORD_MINDAYS=1
PASSWORD_WARNDAYS=7
SU_ROOT_GROUP=sysadm

[Jason Irons_1]

The system is no trusted and the ShadowPW package is not installed.

Forgot to add that this is a HP-UX 11.31 system.

It does seem that HP-UX can only go up to 441.

[Viktor Balogh]

In the /etc/default/security file, PASSWORD_MAXDAYS=-1 means 'disable password aging'. But this works only in trusted mode. Try to set this value via passwd command, let's see if it works!

Alas I cound't find any reference to what is the max value for the '-x' parameter of the passwd command. And I don't have an opportunity to check '-1' on 11iv3. :(

[Hakki Aydin Ucar]

Jason,

As far as I know the enhancements of password security in HP UX, ss an alternative, many enhancements to Shadow passwords were added.

since your OS is 11iv3 you do not already have a chance to use Trusted Mode anymore or in near future.

so you have to focus on Shadow password tool and its enhancements, from http://software.hp.com you can get it and check it docs about max. password days supports your requirements.

[Jason Irons_1]

Many thanks for everyones feedback.