Visit The New, Modern Unix Linux Community


How to set Root password age limit in Solaris 9/10


 
Thread Tools Search this Thread
Operating Systems Solaris How to set Root password age limit in Solaris 9/10
# 1  
How to set Root password age limit in Solaris 9/10

Hi Friends,

Can anyone tell me how can I set the password age limit for root user to 14 days....???

Also would like to add following for root password;
min-alpha --- 4
min-other --- 1
min-length -- 6
min-diff ----- 3

How can I do these on command line....???

Regards,
jumadhiya
# 2  
my os sco 5.0.6
command 'passwd' with letter 'x' expiration
see man passwd for more
# 3  
take a look at man passwd,
the man page describes your question.

cu
lowbyte
# 4  
Thanks Lowbyte.

If I run ;

# passwd -x 14

This will set my new password valid for maximum 14 days...right...???

Do I need to put " -n min " value also...???

Man pages shows;

* Each password must have PASSLENGTH characters, where
PASSLENGTH is defined in /etc/default/passwd and is set to 6. Only
the first eight characters are signifi-cant.

* Each password must contain at least two alphabetic
characters and at least one numeric or special charac-ter. In this
case, "alphabetic" refers to all upper or lower case letters.

* Each password must differ from the user's login name
and any reverse or circular shift of that login name.
For comparison purposes, an upper case letter and its
corresponding lower case letter are equivalent.

* New passwords must differ from the old by at least
three characters. For comparison purposes, an upper
case letter and its corresponding lower case letter
are equivalent.

So can you tell me how can I change ;
min-alphabetic characters to 4
min-other character to 1
min-differ value to 3

I can change min password lenght by editing
/etc/default/passwd file.

Please suggest something.....!!!

Thanks & Regards,
jumadhiya.
# 5  
Quote:
Originally Posted by jumadhiya

So can you tell me how can I change ;
min-alphabetic characters to 4
min-other character to 1
min-differ value to 3

I can change min password lenght by editing
/etc/default/passwd file.

Please suggest something.....!!!

Thanks & Regards,
jumadhiya.

MINALPHA=4
MINDIFF=3 (No need to define since it's the default)
MINNONALPHA=1 (Assuming you consider other to be non alphabetic, no need to define as well since it's the default).

Possible values to define in /etc/default/passwd

DICTIONDBDIR The directory where the generated dic-
tionary databases reside. Defaults to
/var/passwd.

If neither DICTIONLIST nor DICTIONDBDIR
is specified, the system does not per-
form a dictionary check.

DICTIONLIST DICTIONLIST can contain list of comma
separated dictionary files such as
DICTIONLIST=file1, file2, file3. Each
dictionary file contains multiple lines
and each line consists of a word and a
<NEWLINE> character (similar to
/usr/share/lib/dict/words.) You must
specify full pathnames. The words from
these files are merged into a database
that is used to determine whether a
password is based on a dictionary word.

If neither DICTIONLIST nor DICTIONDBDIR
is specified, the system does not per-
form a dictionary check.

To prebuild the dictionary database, see
mkpwdict(1M).

HISTORY Maximum number of prior password history
to keep for a user. Setting the HISTORY
value to zero (0), or removing the flag,
causes the prior password history of all
users to be discarded at the next pass-
word change by any user. The default is
not to define the HISTORY flag. The max-
imum value is 26. Currently, this func-
tionality is enforced only for user
accounts defined in the "files" name
service (local passwd(4)/shadow(4)).

MAXREPEATS Maximum number of allowable consecutive
repeating characters. If MAXREPEATS is
not set or is zero (0), the default is
no checks

MAXWEEKS Maximum time period that password is
valid.

MINALPHA Minimum number of alpha character
required. If MINALPHA is not set, the
default is 2.

MINDIFF Minimum differences required between an
old and a new password. If MINDIFF is
not set, the default is 3.

MINDIGIT Minimum number of digits required. If
MINDIGIT is not set or is set to zero
(0), the default is no checks. You can-
not be specify MINDIGIT if MINNONALPHA
is also specified.

MINLOWER Minimum number of lower case letters
required. If not set or zero (0), the
default is no checks.

MINNONALPHA Minimum number of non-alpha (including
numeric and special) required. If MIN-
NONALPHA is not set, the default is 1.
You cannot specify MINNONALPHA if MINDI-
GIT or MINSPECIAL is also specified.

MINWEEKS Minimum time period before the password
can be changed.

MINSPECIAL Minimum number of special (non-alpha and
non-digit) characters required. If
MINSPECIAL is not set or is zero (0),
the default is no checks. You cannot
specify MINSPECIAL if you also specify
MINNONALPHA.

MINUPPER Minimum number of upper case letters
required. If MINUPPER is not set or is
zero (0), the default is no checks.

NAMECHECK Enable/disable checking or the login
name. The default is to do login name
checking. A case insensitive value of
"no" disables this feature.

PASSLENGTH Minimum length of password, in charac-
ters.

WARNWEEKS Time period until warning of date of
password's ensuing expiration.

WHITESPACE Determine if whitespace characters are
allowed in passwords. Valid values are
YES and NO. If WHITESPACE is not set or
is set to YES, whitespace characters are
allowed.
# 6  
Thanks a ton sb008.

But can you clear me for following;

# passwd -x 14 ----------- This command will set my new password valid for maximum 14 days...right...???

Do I need to use " -n min " value also while specifying the maximum valid days...??? I mean " # passwd -n 5 -x 14 ".....something like this....???

Thanks & Regards,
jumadhiya.
# 7  
Hey,

thats right; passwd -n 5 -x 9 means
passwd is changeable after 5 days and valid for 9 days.
If you set passwd -n 9 -x 8 means
the user may not change the passwd.

CU
lowbyte

Previous Thread | Next Thread
Thread Tools Search this Thread
Search this Thread:
Advanced Search

Test Your Knowledge in Computers #354
Difficulty: Medium
gawk is the only awk implementation that makes serious progress implementing internationalization and localization and TCP/IP networking.
True or False?

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

I have forgot my root password. Solaris 10

hi everyone i have forgot my root password and i have other user to login. can i get the password without restarting the server as that cant be afforded. . it is a Sparc architecture 2U blade server. it is old server mounted and functional since 2009. what should be the modus oprandee. i am novice... (5 Replies)
Discussion started by: janakors
5 Replies

2. UNIX for Beginners Questions & Answers

Can a root role change the root password in Solaris 10?

i do not have root on a solairs 10 server , however i do have the root role, i was wondering if I can change the root password as a a role with the passwd command? I have not tried yet. and do i have to use the # chgkey -p afterwards? i need to patch is why i am asking. thanks (1 Reply)
Discussion started by: goya
1 Replies

3. Solaris

How recover the root password - Solaris 11?

Hello forum members, Please help me to recover the root password. I have had difficulties working with Solaris 11. The run-level equivalents single-user in Solaris 10, I can mount disk in one partition and edit files shadow/passwd. For example: {0} ok boot cdrom -s # mount... (4 Replies)
Discussion started by: Marcela Bueno
4 Replies

4. HP-UX

Sudo entry required to set permission similar to ROOT without using password (PASSWD) change optio

Hi All I had installed sudo in HP UX 11.3 and it is working fine but not able to make entry required to set permission similar to ROOT without using password (PASSWD) change option for define user in /etc/sudoers file Please help if some know the syntex? :confused::wall: (2 Replies)
Discussion started by: deviltech
2 Replies

5. Solaris

Recovering Solaris 8 root password

Hello everyone, i'm trying to recover my root password on a Solaris 8 O.S. I've been trying the next steps(obviously in order) on and on: 1. Inserting the CD-ROM 2. Typing boot cdrom -s 3. Trying to execute fsck -y /dev/dsk/c0t0d0s0. When executing this, I get the following error: can't... (8 Replies)
Discussion started by: alvaradogunner
8 Replies

6. Solaris

solaris 8 reset root password from OSX

Hello, I have two old Solaris machines $ uname -a SunOS unknown 5.8 Generic_117350-39 sun4u sparc SUNW,UltraAX-e2 unfortunately, it has been so long ago that i have used these that the root password has left my head... i can log into one of the machine as a normal user, but am unable to... (4 Replies)
Discussion started by: Norman Khine
4 Replies

7. Solaris

Can't change root password in solaris express 11

How do I change root password in SolarisExpress 11? I used passwd while elevated to root and all it changes is the password of the user I am logged in, not te root password. (2 Replies)
Discussion started by: taltamir
2 Replies

8. Solaris

install eclipse under solaris without root password?

hi, Ho can I install eclipse under solaris without root password? Thanks. peter (1 Reply)
Discussion started by: laopi
1 Replies

9. Solaris

Solaris 8 - Asks for current root password when trying to change root password.

Hello All, I have several solaris boxes running Solaris 8. When changing root passwords on them, all will simply ask for the new root password to change and of course to re-type the new password. One of the systems however asks for the existing root password before it will display the new password... (8 Replies)
Discussion started by: tferrazz
8 Replies

10. Solaris

Solaris root password

Bit of a strange problem I have never come across before.. I can log into the workstation going through the server as it is a trusted host but when I try and connect to the workstation through SSH or RSH directly it will not take the password, I changed the password when I logged in the machine... (5 Replies)
Discussion started by: Mr Pink
5 Replies

Featured Tech Videos