cduser has greater expire time than system default expire time

[san_intel3]

According to axent policies(to remove the vulnerabilities) it is showing a vulnerability like this on HP-UX server which is running in trusted mode

"cduser" has greater expire time than system default expire time

How can we get rid of this vulnerability??
One solution I found was by editing the correspoing file in /tcb/files/auth/c/ directory.
In cduser file if we remove the following entries
u_exp#7257600:u_succhg#1160754250

NOTE:Each user will have its own cofiguration file under the directory /tcb/files/auth/


Is there any other way(preferably command) to clear this vulnerability??

[rariasn]

Hi,

# man modprpw

rgs,