Conference vaxaxp::vmsnotes

160.0. "LOAD_PWD_POLICY on Alpha systems" by ALFSS2::GRINNELL_M () Fri Feb 07 1997 13:55

    I am looking for someone from engineering to acknowledge if the sysgen
    parameter LOAD_PWD_POLICY will be supported on AXP systems.
    
    OpenVMS Programming Concepts Manual, AA-PV67C-TK, Section 25.9, page 25-29.
    The entire section is marked "(VAX Only)" and there are no files in
    SYS$EXAMPLES on the Alpha as are on the VAX.  The only thing that makes
    me wonder if it will work on the Alpha is the existence of the SYSGEN
    parameter "LOAD_PWD_POLICY". 
    
    There is an article entitled "Example-C  Setting Up A Site-Specific Password
    Policy" that states the following:
    
    This sample program has been tested using DEC C V5.3 on OpenVMS VAX
    V7.0 and DEC C V5.3 on OpenVMS Alpha V7.0.  However, we cannot
    guarantee its effectiveness because of the possibility of error in
    transmitting or implementing it.  It is meant to be used as a template
    for writing your own  program, and it may require modification for use
    on your system.
    
    I need to know if engineering is planning on testing this on all
    versions of Alpha systems. If so then I will need to submit a call
    for documentation change.
    
    Thanks in advance,
    Michael

    re .0
    
    Sample programs are just sample programs. I doubt whether such a
    program would ever be tested on all platforms and versions.

    The sample program has no validity regarding whether that feature is
    supported on Alpha. Since the doco clearly states that it is not and
    yet there are hints that it might be, you should ask the product
    manager (after checking the SPD).

re: .0

Yes, LOAD_PWD_POLICY is in place for Alpha.

No, Engineering will not be testing the samples.

\john

   What problem(s) is the customer looking to solve?

   If your customer is asking these questions, you may want to dissuade them
   from implementing a password policy -- it's easy to get this stuff wrong,
   and leave the system vulnerable.

   It is possible to shut off most (all?) of the password policy checks via
   UAF> commands.  (Again, encourage the customer to use the policy, or to
   entirely disable the use of passwords.)

   Please log a QAR against the documentation on TRIFID::, asking that the
   "VAX Only" be removed.

    Thanks for information. I will follow up with a WODC request to
    have the documentation changed.
    
    Michael