NAME

pwd_strengthd − The sample Password Management Server

SYNOPSIS

pwd_strengthd [+/-all[_spaces]] [+/-alp[ha_num]]
[-c[ache_size]] size [-d[ebug]]
[-m[in_len]] pwd_min_len [-t[imeout]] minutes
[-v[erbose]]

OPTIONS

+all_spacesAllow passwords to be all spaces. If this option is not set, the effective registry policy is used. 

-all_spacesDisallow passwords to be all spaces. If this option is not set, the effective registry policy is used. 

+alpha_numAllow passwords to consist only of alphanumeric characters. If this option is not set, the effective registry policy is used. 

-alpha_numDisallow passwords to consist only of alphanumeric characters. If this option is not set, the effective registry policy is used. 

-cache_size size
Specify the number of hash buckets in the password cache. The password cache is used to store generated passwords which are retrieved when the password is strength checked. The password cache is a hash table with a linked list for collisions. The size should be set to a reasonable value based on how large the cache will be on average. The default value if not specified is 100.

-debugRun in the foreground. Log messages are written to standard output. 

-min_len pwd_min_len
Specify the minimum length of a password. If this option is not set, the effective registry policy is used.

-timeout minutes
Specify the time, in minutes, that generated passwords remain in the cache before they are deleted from memory. If this option is not specified, the default time is 30 minutes.

-verboseRuns in verbose mode. More detailed messages are sent to the logfile $DCELOCAL/var/security/pwd_strengthd.log.  (Use of this option is recommended.) 

DESCRIPTION

DESCRIPTION pwd_strengthd is a sample Password Management Server. It exports the rsec_pwd_mgmt application programming interface.  pwd_strengthd generates passwords and strength-checks them. It enforces the security registry policy for password strength-checking.  Administrators can override the security registry policy via the command-line options (alpha_num, all_spaces, min_len.)  Administrators can subject principals to password-strength and -generation policies by attaching the following ERAs:

pwd_val_typeSpecifies the password management policy the user must conform to when selecting passwords. 

pwd_mgmt_binding
Specifies information required in order to connect to the password management server.

See the OSF DCE Administrator’s Guide -- Core Services for more information and examples. 

0 You may want to enhance pwd_strengthd to support your site’s policies for password strength and generation. 

Hewlett-Packard Company  —  OSF DCE 1.1/HP DCE 1.5