Password Restrictions

[Kevin Fiserv]

On a trusted system running hp-ux 11.23, is it possible to restrict users from setting their password with a specific word in it? Example would be not allowing the word "password" to be any part of their password. Like "pAssword123", OPaSsword", or "Spassword1234". Maybe there is a doc out there I'm not finding. Any help would be appreciated. Thanks.

[Steven E. Protter]

Shalom,

HP at http://software.hp.com has a product called Shadow password. It is designed to work like Linux, which uses crack libraries to prevent use of words in passwords.

That might be a better fit than trusted systems.

You can configure trusted systems to require totally random passwords. This can be configured with sam. See man on /etc/default/security

You will really love the number of user complaints that option gets you.

SEP

[Duc Hoang]

You should check out "Security Containment" for 11.23 and 11.31 that can be downloaded for free from software.hp.com . With this installed, you will be able to have a lot more of security features without having to convert your servers to TCB (trusted control based)