RE: [Fed-Talk] pwpolicy -getglobalpolicy not working
RE: [Fed-Talk] pwpolicy -getglobalpolicy not working
- Subject: RE: [Fed-Talk] pwpolicy -getglobalpolicy not working
- From: "Tangren, Bill" <email@hidden>
- Date: Tue, 10 Jan 2012 12:59:02 +0000
- Thread-topic: [Fed-Talk] pwpolicy -getglobalpolicy not working
Many thanks.
I've looked at dscl, and can't figure out how to use it to set something
simple, like usingHistory. The man pages haven't helped. Do you have a link
to where I can learn?
-----Original Message-----
From: Valentine, Ruth Ann B. [mailto:email@hidden]
Sent: Tuesday, January 10, 2012 7:52 AM
To: Tangren, Bill
Subject: Re: [Fed-Talk] pwpolicy -getglobalpolicy not working
I have this on my list of things to investigate. I have been doing admin on
macs since 10.3.9. Starting with snow leopard, it seems that the actual
path the policies, etc is through dscl.
I have been meaning to investigate this. I have actually had to give a user
in the field instructions to re-validate his acount using dscl.
So, my experience is that pwpolicy is a dead animal.
Keep in touch.
RA
On 1/10/12 7:33 AM, "Tangren, Bill" <email@hidden> wrote:
>I have several Mac OS X Lion (10.7.2, fully patched) systems. I'd like
>to set password policy, and I have some guidelines that say to open a
>terminal window, sudo to root, and issue a command like this:
>
># pwpolicy -n /Local/Default -getglobalpolicy
>
>But all it returns is a blank line. If I use it to set a global policy:
>
># pwpolicy -n /Local/Default -setglobalpolicy "usingHistory=10"
>
>It returns no error, but it doesn't set the policy either.
>
>Would someone tell me how to set global password policy, either using
>pwpolicy or something else?
>
>Thanks.
>
>-----
>Bill Tangren, CISSP
>IAM
>U.S. Naval Observatory
>
> _______________________________________________
>Do not post admin requests to the list. They will be ignored.
>Fed-talk mailing list (email@hidden)
>Help/Unsubscribe/Update your Subscription:
>
>This email sent to email@hidden
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden