Not forced to reset password using PWDEXPIRED in AUTHORIZE

[Andrew Chatfield_1]

Hi All,

On our site we have been requested to set all accounts so the password do not expire. To achieve this we have set PWDLIFETIME to 0 by default.

However when we setup a new account we use a default password which the user needs to change once they log on for the first time.
When creating new accounts we use /PWDEXPIRED but when the user logs on they are not asked to change their password.

I thought PWDEXPIRED will result in the password only being valid for one login?

Thanks in advance for any help.

[Karl Rohwedder]

The /NOPWDLIFE seems to override the /PWDEXP setting. You may set a vey large password lifetime, e.g. /PWDLIFE="9999-" to simulate a nearly unlimited lifetime.

regards Kalle

[Heinz W Genhart · Accepted solution]

Hi Andrew

try using

MC AUTHORIZE MOD username /FLAG=PWD_EXPIRED

this may help

Regards

Geni

[Kris Clippeleyr]

Re: Heinz,

The PWD_EXPIRED flag prevents a user from logging in. It does not force her/him to change hers/his password.

FWIW,

Kris (aka Qkcl)

[Andrew Chatfield_1]

Thanks for the info guys,

I have changed the default PWDLIFE to be 9999.

[Andrew Chatfield_1]

Thanks all.