Hi, I'm an I.T. auditor and have to validate the password rules/settings (complexity rules, minimum password length, special characters, etc.)within UNIX for a client. In MS AD, i simply ask for a screen shot of the password settings. How can i do this in UNIX? help much appreciated. Also, how can i test to see how has super user/root priviledges in UNIX?

thanks,

sas 70 auditor.

Ask for the output of 'logins -o -x'. The last five fields will give you the information you are looking for.

fifth field from end: password status of account (locked/passworded/non passworded)
fourth field from end: date of last passwd change (if passworded account)
third field from end: max days before which password must be changed (usually 30 or 60)
second field from end: min days before password can be changed again (usually 1 or 7)
last field: days before password expiry that the user will receive warnings