Raymond Familar wrote:
>
> Audit had a number of issues with the product.  One issue was that the
> security group had set up SecMon to log the use of NEWUSER and ALTUSER.
> That seems reasonable, but that also means that the password is recorded in
> the log in plain text.  Yes, the user should change their password once
> they use that initial login, but there is no way to ensure that happens.

I am sorry to hear you/the auditors are unhappy with our product.
I am also sorry to understand that maybe our product manuals are
not clear enough to help you understand that what you are trying
to achieve is indeed possible :

:newuser testsec.neumann;home=pub;pass=abcdefg;USERPASS=REQ,EXPIRED
:hello testsec.neumann
CPU=1. Connect=1. FRI, SEP 14, 2001, 10:53 AM.
ENTER ACCOUNT (NEUMANN) PASSWORD:

ENTER USER (TESTSEC) PASSWORD:   <abcedfg>

USER PASSWORD HAS EXPIRED
ENTER NEW USER PASSWORD:         <abcdefg> just to check it
                                  works correctly :-)

New PASSWORD must be different from old password. (CIERR 2528)

ENTER NEW USER PASSWORD:

ENTER NEW USER PASSWORD AGAIN:

PASSWORD WAS CHANGED SUCCESSFULLY.

> HP wasn't much help with the SecMon.  When we called to open an SR on that
> issue, the techs had no real knowledge of the product.  I was told that
> they are using security/3000.  Now we are moving to security/3000 after
> going PROD.  Yes, lots of fun.  My recommendation is to go with
> security/3000 and save yourself some headaches.

I am equally sorry to hear that HP was not much help.
Though it is true that SecurityMonitor/iX is probably
not as widespread used as some other vendors offerings,
I must say that I feel a bit embarassed that it took me
only 15 minutes to lookup the manuals and a few tests
to find the above working, and , if I understand you correctly,
the solution to your issue.

http://www.docs.hp.com/mpeix/onlinedocs/32650-90498/32650-90498.html

is where I looked in the
"Managing System Users with Passwords and Logon Restrictons" chapter.

I hope this helps,

Goetz.

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *