Re: password againg and other policy enforcement

Me again. Forgot to finish the sentence, sorry.

Sat, Jun 30, 2007 at 11:59:49PM +0400, Eygene Ryabinkin wrote:
1. Administrator can enforce password expire in /etc/login.conf

In the /etc/master.passwd. login.conf has the fields, but does
not implement the functionality, if the manpage is right:
=====
RESERVED CAPABILITIES
The following capabilities are reserved for the purposes indicated and
may be supported by third-party software. They are not implemented in
the base system.

Name Type Notes Description
<...>
expireperiod time Time for expiry allocation.
graceexpire time Grace days for expired account.
=====
But the following fields are working:
=====
warnexpire time Advance notice for pending account
expiry.
warnpassword time Advance notice for pending password
expiry.
=====
So this can provide some warnings to the user when it logs in.
--
Eygene
_______________________________________________
freebsd-hackers@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@xxxxxxxxxxx"

Relevant Pages