Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Configure a Password History Policy

By default, the storage servers define a password history policy that prevents users from reusing their last 10 passwords.

1. Log into the storage server as celladmin.

   See Log into the Storage Server OS.

2. View the current setting.

   # /opt/oracle.cellos/host_access_control pam-auth --status | grep remember=
   

3. Change the password history.

   To comply with U.S. U.S. Department of Defense security and PCI-DSS requirements, set the password history policy to 5. This ensures that an account cannot reuse any of the five previous passwords assigned to the account. If necessary, replace that value with one that is compliant with your local site policies.

   # /opt/oracle.cellos/host_access_control pam-auth --remember 5
   

4. To verify the setting, repeat Step 2.