display of password characteristics, or parameters

Cerephim · 10-22-2009, 12:44 PM

Hi All,
I'm going through an audit, and the auditors are asking for the password characteristics, such as:
Length of time before required change,
Password length
How many capital characters in password
How many number characters in password
How many special characters in password

Is there an easy way to display/report these characteristics to an auditor. We're running RHEL 4.5

Thank you!

pljvaldez · 10-22-2009, 12:54 PM

http://www.serverwatch.com/tutorials...y-With-PAM.htm

Cerephim · 10-22-2009, 02:00 PM

Thank you very much for your reply, but it does not help. This is a business, and I can't force users to change their passwords just because there's an auditor in the house. I want to report what is there currently, and let the auditors report to management what they find.
Thanks again for your prompt reply.

Cerephim · 10-22-2009, 03:16 PM

more /etc/login.defs

pljvaldez · 10-22-2009, 03:40 PM

Quote:

Originally Posted by Cerephim

Thank you very much for your reply, but it does not help. This is a business, and I can't force users to change their passwords just because there's an auditor in the house. I want to report what is there currently, and let the auditors report to management what they find.
Thanks again for your prompt reply.

Sorry, I wasn't clear. I simply meant you could look at the files they were discussing and figure out what was currently set. It says for redhat based distros to look in /etc/pam.d/system-auth.