Safeguard Administrator's Manual (G06.29+, H06.08+, J06.03+)

Configuration
Safeguard Administrator’s Manual—523317-029
9-7
Configuring Password Control
PASSWORD-HISTORY
Records a specified number of previously used passwords for each user and does
not allow a user to change his or her password to any password in this history. You
can specify a history of 0 to 60 passwords. (If you specify a history of more than 20
passwords, you must convert the USERID files as described in Section 10,
Installation and Management.) Values of 0 and 1 allow the user to reuse any
password, even if used recently. The initial value is 0.
PASSWORD-MAXIMUM-LENGTH
Specifies the maximum acceptable length of a password. The initial value is eight
and the maximum value is 64.
PASSWORD-MINIMUM-LENGTH
Specifies the minimum acceptable length of a password. A value of 0 indicates that
null passwords can be accepted. The initial value is 0.
PASSWORD-REQUIRED
Requires the use of a password by all users when logging on as another user. This
includes logon attempts by the local super ID and group managers. The initial
value is OFF.
PASSWORD-MAY-CHANGE
Specifies the number of days prior to expiration that a user can change a
password. (Expiration is determined by the PASSWORD-MUST-CHANGE attribute
in the user authentication record.) A value of 0 allows the password to be changed
at any time. The default is 0.
If the PASSWORD-MAY-CHANGE period is greater than the PASSWORD-MUST-
CHANGE period in a user authentication record, that user password can be
changed at any time.
PASSWORD-UPPERCASE-REQUIRED {ON / OFF}
Specifies whether the user password will be enforced to have at least one
uppercase character. The initial value is OFF.
The PASSWORD-UPPERCASE-REQUIRED attribute can be set to ON when
PASSWORD-ALGORITHM is HMAC256 and PASSWORD-ENCRYPT is ON.
Note. This attribute is supported only on systems running H06.08 and later H-series RVUs
and G06.31 and later G-series RVUs.
Note. The default value is six only on systems running H06.06 and later H-series RVUs and
G06.29 and later G-series RVUs
Note. Setting PASSWORD-MAY-CHANGE for the super ID has no impact.