Re: Password Expiration on 5.2
- From: "Hunter, Mark" <Mark.Hunter@xxxxxxxxxxxxxxxxxx>
- Date: Thu, 29 Jun 2006 10:39:41 -0500
Rather than changing each user, change the default user stanza in
/etc/security/user. It will apply to all users unless they have an override
value..
Mark Hunter
Anheuser-Busch Cos.
MIS Consultant, ES&SO Server Planning and Integration
*Office: (314) 632-6663
*Fax: (314) 632-6901
?Pager: (314) 841-4026
*Email: Mark.Hunter@xxxxxxxxxxxxxxxxxx
The information transmitted (including attachments) is covered by the Electronic
Communications Privacy Act, 18 U.S.C. 2510-2521, is intended only for the
person(s) or entity/entities to which it is addressed and may contain
confidential and/or privileged material. Any review, retransmission,
dissemination or other use of, or taking of any action in reliance upon, this
information by persons or entities other than the intended recipient(s) is
prohibited. If you received this in error, please contact the sender and delete
the material from any computer.
_____
From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of Green,
Simon
Sent: Thursday, June 29, 2006 10:16 AM
To: aix-l@xxxxxxxxxxxxx
Subject: Re: Password Expiration on 5.2
No!
You want the MAX. AGE parameter. That's in weeks, so either 4 or 5 for a month.
"Weeks between password EXPIRATION and LOCKOUT" means that after a password
expires, if it hasn't been updated 4 weeks later the userid gets locked, so it
can't be used at all - not even to set a new password - until an administrator
unlocks it.
If you've got a lot of users to co it's probably easier to use the chuser
command.
--
Simon Green
Altria ITSC Europe s.a.r.l.
AIX-L Archive at https://lists.princeton.edu/listserv/aix-l.html
New to AIX? http://publib-b.boulder.ibm.com/redbooks.nsf/portals/UNIX
N.B. Unsolicited email from vendors will not be appreciated.
Please post all follow-ups to the list.
-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of
Larry Scheetz
Sent: 29 June 2006 15:18
To: aix-l@xxxxxxxxxxxxx
Subject: Password Expiration on 5.2
Admins,
I am trying to setup all user to have their password expire every 30
days. I have made two changes in "smit passwdattrs" and they are below. I want
to make sure that the system will expire a user's password every month (30 days)
and it will warn them 3 days before it is going to expire. Would the below
changes be correct? Looks like the default Weeks between Expiration was -1.
Any help would be appreciated.
Days to WARN USER before password expires [3]
Weeks between password EXPIRATION and LOCKOUT [4]
Thanks Larry
The information transmitted (including attachments) is
covered by the Electronic Communications Privacy Act,
18 U.S.C. 2510-2521, is intended only for the person(s) or
entity/entities to which it is addressed and may contain
confidential and/or privileged material. Any review,
retransmission, dissemination or other use of, or taking
of any action in reliance upon, this information by persons
or entities other than the intended recipient(s) is prohibited.
If you received this in error, please contact the sender and
delete the material from any computer.
- Prev by Date: Re: Password Expiration on 5.2
- Next by Date: Re: Execute permission of a file
- Previous by thread: Re: Password Expiration on 5.2
- Index(es):
Relevant Pages
- Re: Password never expires-cant force user to change password
... Password policy on the domain for domain users is all or nothing. ... You want
to implement a new password expiration policy. ... > Expire your departments
manually. ... I'm just not a very good script writer and am not very confident. ...
(microsoft.public.windows.server.active_directory) - Re: Active Directory Expiration Notification
... message to the user that their password is about to expire. ... that value in
the security policy via the "Prompt user to change password ... Password expiration
is determined by the domain password expiration ... Joe Kaplan-MS MVP Directory Services Programming
... (microsoft.public.windows.server.active_directory) - Re: Password never expires-cant force user to change password
... The mechanism for forcing a user to change password is a password expiration. ...
require a new password UNLESS the account is set to never expire. ... Joe Richards Microsoft
MVP Windows Server Directory Services ... (microsoft.public.windows.server.active_directory) - Re: Password Expiration on 5.2
... You want the MAX. AGE parameter. ... "Weeks between password EXPIRATION
and LOCKOUT" means that after a password ... I am trying to setup all user to have their
password expire every 30 days. ... (AIX-L)