topic Re: forcing password aging - today is day one in Operating System - HP-UX

forcing password aging - today is day one

RobertCarback — Thu, 14 Feb 2008 20:22:50 GMT

HP-UX 11iv2 (IA64)
How do I force all users to be on a 42 day pasword aging policy starting today?

Re: forcing password aging - today is day one

Paul Sperry — Thu, 14 Feb 2008 20:29:22 GMT

your system will have to be trusted

sam
Auditing ans security
System Security Policies.

Then you can set password aging.

Re: forcing password aging - today is day one

RobertCarback — Thu, 14 Feb 2008 20:32:09 GMT

it's already trusted. I'm saying that if today I change the aging policy from the current setting of 56 days to 42 days will all users begin the 42 day count today?

Re: forcing password aging - today is day one

Tim Nelson — Thu, 14 Feb 2008 21:02:17 GMT

The supported way would be to select "expire all users passwords" option.

All users would have to change their pw after this.

Re: forcing password aging - today is day one

Paul Sperry — Thu, 14 Feb 2008 21:09:03 GMT

the 42 day age is the age since the last sucessful password change. So to answer you question. No they will not all expire in 42 days. You could use

modprpw -E

This option is specified WITHOUT a user name to expire all user's
passwords. It goes through the protected password database and
zeroes the successful change time of all users. The result is
all users will need to enter a new password at their next login.

Re: forcing password aging - today is day one

RobertCarback — Thu, 14 Feb 2008 21:16:18 GMT

thanks all