max password length

[MoreFeo]

We would like to know if there is a way to make AIX manage password longer than 8 characters.
Right now, AIX lets us use passwords longer than 8, but it will only store the 8 first characters.

Does anyone know if this can be done?

Thanks

 

[khalidaaa]

This case was raised few weeks ago and the answer was that up to AIX5.2 you can't exceed 8 character in the password! You can do that only in AIX5.3.

I can't find the previous post! Once i find it i will post it here for your reference.

Regards,
Khalid

 

[MoreFeo]

I've done a search in the forum, but I've not seen this post.
Our servers have AIX 5.3 TL04, so I suppose it can be done.
There is also a weird thing. We have put in /etc/security/user that passwords must have at least 3 non-alphabetic characters and a min length of 8. In all our servers except one, if you put a password like qwerty123 it lets you, but AIX will only store as password qwerty12 (less than 3 non-alphabetical), but in one server this will fail, it won't let you put a password if it doesn't have the 3 non-alphabetical in the 8 first characters.

 

[teakandme]

To set the maxnumber of characters for 5.3
chdev -l sys0 -a max_logname=9

As for the min length and the non-alphabetic characterr...do the individual user stanza reflect the difference that you are experiencing?

 

[MoreFeo]

Thanks, will try this tomorrow.

 

[MoreFeo]

Tried chev -l sys0 -a max_logname=10 and it didn't work, max password length is still 8 (if I put a 10 characters password, it only stores the 8 first).
What this does is to increase the max length of the user's name, not the password length.

Thanks anyway

 

[khalidaaa]

Ok i got this one but now i see that it has to do with the username length not the password i guess!

Have a look into that:

http://www.tek-tips.com/viewthread.cfm?qid=1385090&page=4

Regards,
Khalid

 

[blantczak]

logname is lenght of user name not password. Those solutions are bad. I will look into base to find if there is possibility for longer password.

Regards,
Blazej

 

[blantczak]

Check that - it can be solution. I don't have machine to test that - but looks resonable:

http://www.ibm.com/developerworks/f...e=13971165&thread=168395&forum=1123&ca=drs-fo

Regards,
Blazej

 

[MoreFeo]

Thanks a lot, going to give it a glance.

 

[blantczak]

MoreFreo - please let me know how it went when you will test that - I'm more than interested

Regards,
Blazej

 

[MoreFeo]

Well, I'm going to take a look at it, and I'll try it on a test server, but I don't know when will this be.
Anyway I'll let you know.