Root password changed but old one still works

UNIX AIX
1

Hello

i am running AIX 6.1. i recently changed the root password using passwd and pwdadm. while the new password works fine, i am still able to login using the old password. is there anyway this can disabled\fixed

thanks

2

It is possible that you use for the new password the same leading 8 characters as for the old one?

The (old) AIX-Default Password Algorithm will only check the first 8 characters.

Regards

1 Like
3

didn't know that. will give it a try and let you know

thanks

---------- Post updated at 08:18 AM ---------- Previous update was at 08:15 AM ----------

worked, thanks

4

It is highly recommended to change that default password algorithm to a stronger one.

Example:
chsec -f /etc/security/login.cfg -s usw -a pwd_algorithm=ssha256

... and re-enter the passwords for all user with passwd .

Regards

5

i will look into it further thanks

6

Also, on the side note, when you were entering the new password is the prompt coming ok? or it is giving you some error.

There is no harm in checking the values of default stanza and or root's user stanza in /etc/security/user file

Check to see what these values are

histexpire 
histsize 
maxage
maxrepeats