RHEL6–38–
IMPLEMENTING PASSWORD POLICY
Securing
system is vital for every Admin and password policy plays a major role in that.
What we will learn in this post, (FOR RHEL-6)
- Minimum password length would be of 8 characters.
- Password expiry duration would be 90 days.
- Password change warning should be flashed to users before 14 days.
- Users must change the password at their first login.
- Password contains at least one number.
- Password contains at least one Upper case alphabet.
- Password contains at least one Lower case alphabet.
- Password contains at least one Special character.
- Lock account after five failed login attempts.
- Auto unlock account after N number of minutes.
- Lock even root user after five failed login attempts
- Auto logout users after 30 minutes of idle/inactive session.
- Enforcing password history up to last three passwords.