AIX

I need help. I have set a password policy. But I want to dis allow setting user name as password.
My policy is as below...

Code:

min length =8
min diff=2
min alpha=2
max repeats=2
dictionary= /usr/share/dict/words

Still user can set his username as password (i.e. Jackie1234).

Moderator's Comments:

Code tags for code, please.

Ok, add minother and minupperalpha, minother will require the user to add a special character and minupperalpha as you can guess needs an upper case alphabet.

Its aix 6.1 and min upperalpha is not there. But anyways this does not resolves my query.

Hmmm,
I doubt that. I don't have any box running 6.1.

If you configure those, the user cannot use the exact username as password, unless root is forcing it.

Here's a hack that may help.

TEST
As root, create a file, let's call it pdictlst, and make sure only root has read\write permissions.

Add a user's username to the file and save it.

Use the chuser command to set the password dictionary for that user to this file:

Code:

chuser dictionlist=/path/to/pdictlst username

As that user, attempt to change the password to the username. You should receive an error:

Code:

Passwords must not match words in the dictionary.

IMPLEMENTATION
To enable this system-wide, make a copy of the default dictionary file /usr/share/dict/words. Add all the usernames to this file, then run the following command:

Code:

chuser dictionlist=/path/to/words

Now the dictionary password check will check both dictionary words and usernames. If the words file is not installed, I believe it is in the bos.data fileset.

Hope this helps.

That's a cool thing, but if the users come via LDAP you will have to draw a list of user names at least maybe once a day to update that dict file.

True, but like the majority of postings on here, we never seem to get the entire picture. Just the bits and pieces...