Login or Register to Ask a Question and Join Our Community


Solaris

Need help in configuring Password Constraints for Solaris 11.3

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems Solaris Need help in configuring Password Constraints for Solaris 11.3
# 1  
Old 09-08-2016
Need help in configuring Password Constraints for Solaris 11.3
Hello Friends

I was running Solaris 11.3 x86.

Below is my configuration to set password Constraints.


Code:
more /etc/default/passwd 

MAXWEEKS=4
MINWEEKS=1
WARNWEEKS=1
PASSLENGTH=8

NAMECHECK=YES

HISTORY=4

MINDIFF=3
MINALPHA=2
MINNONALPHA=1
MINUPPER=1
MINLOWER=1
MAXREPEATS=2
MINSPECIAL=0
MINDIGIT=1
WHITESPACE=YES

DICTIONLIST=/usr/share/lib/dict/words
DICTIONDBDIR=/var/passwd
#DICTIONMINWORDLENGTH=3

Code:
more /etc/pam.conf

other   password required       pam_dhkeys.so.1
other   password requisite      pam_authtok_get.so.1
other   password requisite      pam_authtok_check.so.1
other   password required       pam_authtok_store.so.1

Code:
more /etc/shadow

test123:$5$d0RtrmM4$dKEvxqLSUDvMpjVy5l8nrg/42cBdqzlsff3lGlaYte9:17052:7:28:7:::

Still I am able to set even single digit as password to any account, even though PASSLENGTH is configured as 8.

Code:
root@test:~# passwd test123
New Password: 
Re-enter new Password: 
passwd: password successfully changed for test123
root@test:~#

Can anybody with experience on this help in figuring out the issue. Where else do I need to do configuration to have /etc/default/passwd related constraints effective.

Thanks in advance


Moderator's Comments:
Mod Comment Use code tags please, thanks.
# 2  
Old 09-08-2016
Hi jebby123 and welcome to the forums.

Please search this forum for discussions on this topic.

Here is a link to a thread where many of us so called experts had input to reach the correct conclusion:

Problems setting password.

I'll check it out and post links to other threads shortly, but do you own search please.

---------- Post updated at 07:59 PM ---------- Previous update was at 07:57 PM ----------

Happy learning....

Solaris passwd problem

---------- Post updated at 08:05 PM ---------- Previous update was at 07:59 PM ----------

Password policy problem ??
# 3  
Old 09-08-2016
Quote:
Originally Posted by jebby123
Can anybody with experience on this help in figuring out the issue. Where else do I need to do configuration to have /etc/default/passwd related constraints effective.
Have a look to the /usr/lib/security/pam_authtok_common file. The force_check parameter might have been removed from the pam_authtok_check.so.1 module:
Code:
other password requisite  pam_authtok_check.so.1 force_check

These 3 Users Gave Thanks to jlliagre For This Post:
hicksd8 jebby123 rbatte1
# 4  
Old 09-09-2016
Hi Jlliagre

Adding force_check solved the issue.

Thanks for the help
# 5  
Old 09-09-2016
Glad it worked!

Note that under Solaris 10 and older, root wasn't affected by password constraints and could set whatever password for any account. Solaris 11 changed that and, by default, is enforcing the password constraints for all users including root. That wasn't the case in your system which was modified to restore the old behavior. Regular (i.e. non root) accounts were still constrained though.
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Solaris

Configuring SMTP on Solaris to use Specific IP

Hi, I have a Solaris server, This server has 4 ethernet ports, I need the SMTP service out a Specific IP of these four, What I have to do to set it up? Regards Enrique (1 Reply)
Discussion started by: Enrique Suarez
1 Replies

2. Solaris

Help with configuring printer on Sun Solaris

I have tried and tried again, to get an HP 4700dn laserjet printer to work on a GI Sun Solaris BOX. I have gone through and added the Printer server and IP to the Host file in the /etc folder and also added the printer ip and printer name itself. when I go to print something the printer shows up in... (7 Replies)
Discussion started by: kane4355
7 Replies

3. Solaris

Configuring samba in solaris x-86

I just wanted to know if I can configure samba on solaris 10 x-86. I was just wondering if the samba is in-built software gets shipped with Operating System CD. I have searched a lot on many sites and forums but still not getting any way to make it. It would be really appreciable if some can... (1 Reply)
Discussion started by: naw_deepak
1 Replies

4. Shell Programming and Scripting

need help on configuring LDAP server on solaris

HI All I need help to understand how the ldap works in Solaris 9 & Solaris 10. Kindly provide me some helpful commands related to LDAP Regards Jagan (2 Replies)
Discussion started by: jaganblore
2 Replies

5. Solaris

Configuring TP Ethernet SS5 Solaris 8

Hey. how do i configure the Lance Ethernet in my SS5 i must use DHCP to get Internet access. i have tried sys-unconfig and ifconfig le0 plumb and dhcp. but no cigar. how do i configure ? i have had some problems with the /etc/hosts dir. it says it dosent exist and when i try to create it it says... (1 Reply)
Discussion started by: mads-nielsen
1 Replies

6. Solaris

Configuring TP Ethernet in SPARCstation 5 Solaris 8

Hey. i have been trying to configure the on board Ethernet in My Sparcstation 5, i have spent a lot of time on the ifconfig man pages. but it could really be nice with some pro. help. i don't think the interface is running . i don't know what name the interface have, le0 eth0 et0, it just says no... (4 Replies)
Discussion started by: mads-nielsen
4 Replies

7. UNIX for Dummies Questions & Answers

Configuring networking interfaces on Solaris 10

Hi, I am trying to configure an ip address, netmask, and default gateway on my solaris machine. For example, in Linux I would do the following command: #ifconfig eth0 xx.xx.xx.xx netmask 255.0.0.0 #add route or route add default xxx.xxx.xxx.xxx In Solaris 10, I believe the commands are... (7 Replies)
Discussion started by: annointed3
7 Replies

8. Solaris

tftp configuring on Solaris 5.7

Hi, I need to setup a tftp facility on a Sun server. Can someone help me urgently, i need this to be up at the earliest. Regards, Vivek :( (1 Reply)
Discussion started by: vivek_scv
1 Replies

9. UNIX for Dummies Questions & Answers

Need help for configuring outgoing mail in Solaris 9

G'day, I've a solaris 9 box that I want to configure so that users can send out mails to internet. How can I do it? Can someone pls list me the steps or direct me to a detailed website. Thanks in advance. (1 Reply)
Discussion started by: Albert J.
1 Replies
Login or Register to Ask a Question