Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Set Password History Logs and Password Policies for PCI Compliance

The HISTORY parameter in the /etc/default/passwd file prevents users from using similar passwords with the HISTORY value.

If MINWEEKS is set to 3 and HISTORY is set to 10, passwords cannot be reused for 10 months.

1. Log in to one of the compute servers and access the host console as superuser.

   See Log into a Compute Server.

2. Edit the /etc/default/passwd file and set the password parameters.

   # pfedit /etc/default/passwd
   . . .
   #Compliance to the PCI-DSS benchmark is 10
   #HISTORY=0
   HISTORY=10
   MINDIFF=4
   MINDIGIT=1
   MINUPPER=1
   MINWEEKS=3
   MAXWEEKS=13
   

3. Edit the /etc/default/login file to include these parameters.

   # pfedit /etc/default/login
   . . .
   # Compliance edit
   #PASSLENGTH=6
   PASSLENGTH=14
   . . .