About HP DCE/9000 Version 1.7

HP Password Management Server

HP Password Management Server

A Password Management Server implements policies for password strength. Sites can implement site-specific policies by writing their own Password Management Server, and attaching appropriate Extended Registry Attributes (ERAs) to the principals that are subject to these policies.

A Password Management Server must implement the interface described in dce/rsec_pwd_mgmt.idl.

In order to be configurable by dce_config or DCM, the Password Management Server must conform to the following guidelines:

•There must be only one Password Management Server per cell.

•The Password Management Server must execute on the same machine as the master DCE Security Server.

•The binary must be named pwd_strengthd.

•The binary must be located in /opt/dce/sbin.

•There must be a single option, -v, on the command line.

•The server must log any information it generates to /var/opt/dce/security/pwd_strengthd.log.

•The server must export its interfaces to CDS in /.:/subsys/dce/pwd_mgmt/pwd_strength.

•The server must use keytab file in /krb5/pwd_strength_tab.

•The server must use principal name and CDS entry name of pwd_strength.

•The server must not depend on any other environment variables or files that must be configured.

Example Sources

Password Management Server sources are supplied in /opt/dce/share/hpexam. These are the sources used to build the Password Management Server supplied with the HP DCE release.

Planning and Configuring HP DCE 1.7

1-31