How to disable the INACTIVITY_MAXDAYS lockout for specific users

[Adrian Horne]

Hi

On HP-UX 11.23 with SMSE installed, I am implementing the locking of inactive accounts via the INACTIVITY_MAXDAYS setting in /etc/default/security. I want to exclude some accounts from being locked even if inactive.

Reading the man pages suggests that setting the appropriate field in /etc/shadow to zero will disable the locking. However, usermod -f disallows setting the field to zero. Manually updating the field (by editing /etc/shadow) does seem to disable locking.

So, is there a simple method to exclude an account from inactivity locking? I could override with a value of 999 which is probably sufficient, but it feels like you should be able to turn it off for a user.

Additionally, on 11.31 the man pages imply that a zero in /etc/shadow just leads to the system default setting. Again, can it be turned off for a given account?

Thanks
Adrian

[madhuchakkaravarthy]

hi

/usr/lbin/modprpw -m mintm=0,lftm=0,exptm=0,expwarn=0 -k [username]

to disable aging for particular user.

regards

MC

[Adrian Horne]

Hi

We are using Standard Mode Security Extensions rather than trusted mode. modprpw is specifically for trusted systems.

Thanks