Identity Manager 8.1.5 - Administration Guide for Connecting Unix-Based Target Systems

Table 23: Password data for user accounts in an AIX system
Property	Description
minlen	Minimum number of characters a password must have. (Parameter minlen).
maxrepeats	Maximum number of characters that can be repeated in passwords. The default value 8 specifies that a maximum has not been fixed. (Parameter maxrepeats).
mindiff	Minimum number of unique characters that passwords must contain. (Parameter mindiff).
minalpha	Specifies the minimum number of alphabetical characters a new password must contain. (Parameter minalpha).
minloweralpha	Specifies the minimum number of lowercase letters a new password must contain. (Parameter minloweralpha).
minupperalpha	Specifies the minimum number of uppercase letters a new password must contain. (Parameter minupperalpha).
mindigit	Specifies the minimum number of digits a new password must contain. (Parameter mindigit).
minspecialchar	Specifies the minimum number of special characters a new password must contain. (Parameter minspecialchar).
minother	Specifies the minimum number of non-alphabetical characters a new password must contain. (Parameter minother).
dictionlist	Dictionary file of black listed passwords. Verifies passwords do not include standard Unix words. (Parameter dictionlist).
histexpire	Number of weeks before a password can be reused. (Parameter histexpire).
histsize	Number of password iterations allowed before an old password can be used again. (Parameter histsize).
minage	Minimum number of weeks before a password can be changed. (Parameter minage).
maxage	Maximum number of weeks before a password must be changed. (Parameter maxage).
maxexpired	Maximum number of weeks beyond maxage that an expired password can be changed by the user. (Parameter maxexpired).
pwdchecks	Methods to apply to new passwords that check the password quality. The value contains a comma delimited list of method names. (Parameter pwdchecks).
pwdwarntime	Number of days before the system issues a warning that a password change is required. (Parameter pwdwarntime).

Security-relevant user account master data

On Security, enter the following additional information about a user account in the AIX system. This data is mapped in /etc/security/user.

Table 24: Additional security relevant data for user accounts in an AIX system
Property	Description
account_locked	Specifies whether the user account is locked. (Parameter account_locked).
admin	Defines the administrative status of the user. (Parameter admin).
admgroups	Lists the groups the user administrates. (Parameter admgroups).
auditclasses	The user account's audit classes. (Parameter auditclasses).
auth1	Additional mandatory methods for authenticating the user. (Parameter auth1).
auth2	Additional optional methods for authenticating the user. (Parameter auth2).
core_compress	Enables or disables core file compression. (Parameter core_compress).
core_path	Enables or disables core file path specification. (Parameter core_path). If this attribute has a value of On, core files will be placed in the given directory. otherwise, core files are placed in the user's current working directory.
core_naming	Naming conventions for the core file. If this option is set, the core file is stamped with a process ID, time, and date. (Parameter core_naming).
daemon	Specifies whether the user can execute programs using the cron daemon or the src (system resource controller) daemon. (Parameter daemon).
dce_export	Specifies whether the DCE registry can overwrite the local user information with the DCE user information during a DCE export operation. (Parameter dce_export).
expires	Expiration date of the user account. (Parameter expires).
login	Specifies whether the user can log in to the system with the login command. (Parameter login).
logintimes	Times, days, or both, the user is allowed to access the system. (Parameter logintimes).
loginretries	Number of unsuccessful login attempts allowed after the last successful login before the system locks the account. (Parameter loginretries). A value of 0 or a negative value, indicates no maximum age.
projects	List of projects that the user's processes can be assigned to. The value is a list of comma-delimited project names. (Parameter projects).
registry	Defines the authentication registry where the user is administered. (Parameter registry).
rlogin	Permits access to the account from a remote location with the telnet or rlogin commands. (Parameter rlogin).
su	Specifies whether another user can switch to the specified user account with the su command. (Parameter su).
sugroups	Groups that can use the su command to switch to the specified user. (Parameter sugroups).
SYSTEM	System's authentication mechanism for the user. (Parameter SYSTEM).
tpath	The user's trusted path status. (Parameter tpath).
ttys	Lists the terminals that can access the user. (Parameter ttys).
umask	Determines file permissions. (Parameter umask). The default value is 022.

Master data for a user account on an encrypted file system

On the Encrypted File System tab, enter the following additional information for using encrypted file system (EFS) for a user account in an AIX system. This data is mapped in /etc/security/user.

Table 25: User account master data for encrypted file systems
Property	Description
efs_adminks_access	Defines the efs_admin keystore location (Parameter efs_adminks_access). Permitted values: file ldap
efs_allowksmodechangebyuser	Specifies whether the user can change the mode or not. (Parameter efs_allowksmodechangebyuser).
efs_file_algo	Algorithm used to generate the file protection key. (Parameter efs_file_algo). Permitted values: AES_128_CBC AES_192_CBC AES_256_CBC
efs_initialks_mode	Initial mode of the user keystore. (Parameter efs_initialks_mode). Permitted values: guard admin
efs_keystore_access	User keystore location. (Parameter efs_keystore_access). Permitted values: none file
efs_keystore_algo	Algorithm used to generate the user private key when the keystore is created. (Parameter efs_keystore_algo). Permitted values: RSA_1024 RSA_2048 RSA_4096

Additional tasks for managing Unix user accounts

After you have entered the master data, you can run the following tasks.

Displaying the Unix user account overview

Changing the manage level of Unix user accounts

Assigning Unix groups directly to a Unix user account

Assigning extended properties to Unix user accounts

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Identity Manager 8.1.5 - Administration Guide for Connecting Unix-Based Target Systems

User account password data

Security-relevant user account master data

Related topics

Master data for a user account on an encrypted file system

Additional tasks for managing Unix user accounts