Troubleshooting
Problem
MINLEN user variable defines the minimum length a user's password can be set. In early releases of AIX, a user's password had a maximum length of 8 characters, hence, the MINLEN variable had a range of 0-8. However, beginning with AIX 530-07, Loadable Password Algorithm (LPA) can be used to increase passwords to > 8 characters. In doing so, the MINLEN variable can also be increased.
Symptom
Unable to set MINLEN to > 8 characters
Cause
Default setting in AIX without LPA enabled.
Environment
AIX 5300-07 and above, including AIX v6.1 and v7.1
Diagnosing The Problem
chuser minlen=<value > 8> will not error, but will not alter the current MINLEN value.
Resolving The Problem
Given a current MINLEN value of 0...
# lsuser -a minlen foo
foo minlen=0
Prior to configuring LPA, setting minlen to any value > 8 didn't error, but also fails to change the minlen value.
# chuser minlen=12 foo
Error changing "minlen" to "12" : Value is invalid.
# lsuser -a minlen foo
foo minlen=0
Setting the value between 0-8 works fine.
# chuser minlen=4 foo
# lsuser -a minlen foo
foo minlen=4
Enable LPA per the following technote
http://www.ibm.com/support/docview.wss?uid=isg3T1010741
chuser is now able to set minlen to a value > 8
# chuser minlen=12 foo
# lsuser -a minlen foo
foo minlen=12
Related Information
Was this topic helpful?
Document Information
Modified date:
17 June 2018
UID
isg3T1012156