Password management / centralized password management Post: 302542881

8 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

centralized unix user management

Does it exist centralized tools on unix for managing users of all servers (like windows AD) ?

2. Shell Programming and Scripting

how to change root password using shell script with standard password

Hi Friends. I am new to scripting now i want to change the root password using the script with standard password. which is the easy scripting to learn for the beginner, Thanks in advance.

3. Solaris

SSH Password-less login fails on password expiry.

Hi Gurus I have a few Sol 5.9 servers and i have enabled password less authentication between them for my user ID. Often i have found that when my password has expired,the login fails. Resetting my password reenables the keys. Do i need to do something to avoid this scenario or is this...

4. UNIX for Advanced & Expert Users

Multi-platform Centralized Patch Management

We have a mix of AIX, HP-UX, Linux (RHEL and SLES), and Solaris in our environment. Currently we have seperate patch management systems for each platform (NIM, SD, Spacewalk, etc), but have started looking for a centralized patch management solution that would work for most, if not all, of our...

5. UNIX for Dummies Questions & Answers

password protect a CSV file: better solution than ZIP password?

Hi We send *.csv with sensitive data to our customers. Our customers open those files with Excel. A new requirement is that we password protect those CSV files. I thought to pack them with ZIP and assign a password to the archive. But Solaris 10 can't encrypt ZIP files. $ zip -P...

6. UNIX for Advanced & Expert Users

Password management

You know those lists of "the most common passwords"? I was looking at one of those because I actually want to use a really common password or two on occasion. The thing is I'm skeptical that these are legitimate lists. Most things these days require at least 8 chars with a numeral. But these lists...

7. What is on Your Mind?

Individual Risk Management (Personal IT Security) and Browser Cache Management

Original post from this thread on browser caching. To add to this, it is an effective security measure to clear absolutely all cached data (cookies, web content, ....) when closing the browser - i.e. in case of a shutdown. It takes a bit of work to re-login to all the sites but websites will not...

8. Forum Support Area for Unregistered Users & Account Problems

Password sent via reset password email is 'weak' and won't allow me to change my password

I was unable to login and so used the "Forgotten Password' process. I was sent a NEWLY-PROVIDED password and a link through which my password could be changed. The NEWLY-PROVIDED password allowed me to login. Following the provided link I attempted to update my password to one of my own...

LEARN ABOUT HPUX

pwd_strengthd

pwd_strengthd(1m)														 pwd_strengthd(1m)

NAME

       pwd_strengthd - The sample Password Management Server

SYNOPSIS

       pwd_strengthd [+/-all[_spaces]] [+/-alp[ha_num]]
       [-c[ache_size]] size [-d[ebug]]
       [-m[in_len]] pwd_min_len [-t[imeout]] minutes
       [-v[erbose]]

OPTIONS

       Allow  passwords  to be all spaces. If this option is not set, the effective registry policy is used.  Disallow passwords to be all spaces.
       If this option is not set, the effective registry policy is used.  Allow passwords to consist only  of  alphanumeric  characters.  If  this
       option is not set, the effective registry policy is used.  Disallow passwords to consist only of alphanumeric characters. If this option is
       not set, the effective registry policy is used.	Specify the number of hash buckets in the password cache. The password cache  is  used	to
       store  generated passwords which are retrieved when the password is strength checked. The password cache is a hash table with a linked list
       for collisions. The size should be set to a reasonable value based on how large the cache will be on average.  The  default  value  if  not
       specified  is  100.  Run in the foreground. Log messages are written to standard output.  Specify the minimum length of a password. If this
       option is not set, the effective registry policy is used.  Specify the time, in minutes, that  generated  passwords  remain  in	the  cache
       before  they are deleted from memory. If this option is not specified, the default time is 30 minutes.  Runs in verbose mode. More detailed
       messages are sent to the logfile $DCELOCAL/var/security/pwd_strengthd.log.  (Use of this option is recommended.)

DESCRIPTION

       DESCRIPTION

       pwd_strengthd is a sample Password Management Server. It exports the rsec_pwd_mgmt application programming interface.

       pwd_strengthd generates passwords and strength-checks them. It enforces	the  security  registry  policy  for  password	strength-checking.
       Administrators can override the security registry policy via the command-line options (alpha_num, all_spaces, min_len.)

       Administrators can subject principals to password-strength and -generation policies by attaching the following ERAs: Specifies the password
       management policy the user must conform to when selecting passwords.  Specifies information required in order to connect  to  the  password
       management server.

       See the OSF DCE Administrator's Guide -- Core Services for more information and examples.  You may want to enhance pwd_strengthd to support
       your site's policies for password strength and generation.

																 pwd_strengthd(1m)