Wise people learn when they can; fools learn when they must - Arthur Wellesley

Sunday, 18 February 2018

RHEL6–38– IMPLEMENTING PASSWORD POLICY IN RHEL-6


          RHEL6–38– IMPLEMENTING PASSWORD POLICY  

Securing system is vital for every Admin and password policy plays a major role in that.


What we will learn in this post, (FOR RHEL-6)


  1. Minimum password length would be of 8 characters.
  2. Password expiry duration would be 90 days.
  3. Password change warning should be flashed to users before 14 days.
  4. Users must change the password at their first login.
  5. Password contains at least one number.
  6. Password contains at least one Upper case alphabet.
  7. Password contains at least one Lower case alphabet.
  8. Password contains at least one Special character.
  9. Lock account after five failed login attempts.
  10. Auto unlock account after N number of minutes.
  11. Lock even root user after five failed login attempts
  12. Auto logout users after 30 minutes of idle/inactive session.
  13. Enforcing password history up to last three passwords.