Accounts can be used without a password (UNIX)

Module: Password Strength

This check reports user accounts that can be set to have NULL passwords on HP-UX and Digital UNIX/Tru64 systems. To avoid security problems, your operating system should be allowed to enforce non-NULL passwords on all accounts.

The following table lists the error messages for the check.

Table: Error messages for Accounts can be used without a password

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: STKU_ALLOWNULL

Category: ESM Error

UNIX (5342)

Title: Account can be used without password

Description:The listed user accounts are allowed to have NULL passwords. To avoid security problems, these accounts should be modified so that NULL passwords are not permitted when the user changes passwords.

Severity: yellow-1

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: STKU_NOTSUPPORT_ALLOWNULL

Category: ESM Error

UNIX (5392)

Title: Account can be used without password not supported

Description:The agent does not support the check for Account can be used without password.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]