Details

Defines the maximum number of times a character may appear in a password.

In setting the maxrepeats attribute, it enforces a maximum number of character repeats within a password.

Solution

In/etc/security/user, set the default user stanza maxrepeats attribute to 2-

chsec -f /etc/security/user -s default -a maxrepeats=2

This means that a user may not use the same character more than twice in a password.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/528

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Unix.

References

• 800-53|IA-5(1)(b)

Source

• Tenable.com/audits