Difference between lftm and exptm

[Belinda Dermody]

when using the modprpw command what is the difference between the two above mention arguements when you a vaule like 90

[A. Clay Stephenson]

The best explanation of the difference is given in the getprpwent man page.

[Belinda Dermody]

Well Clay this is the first time that you disappointed me with your answer. I read the man pages and I am the type that needs an example or a work mens explanation.

I have been using exptm for my users and all of a sudden they are locked out and we have to enable them first and then change there passwd. I was wondering if the lftm would just tell them they had to change there password without disabling the account like exptm did.

[A. Clay Stephenson · Accepted solution]

Okay, I try again although the explanation in getprpwent seems clearer than than in man 4 prpwd. In any event, the idea is that a regular user can still change a passwd that has expired (an expired password is one in which the time since the last password change + u_exp >= now. All of these are measured in epoch seconds. However, if liftm is exceeeded the account can only be unlocked by a super-user. The only whacky part about this is the modprpw command multiplies the values by 86400 so that the values are expressed in days rather than seconds. The underlying C functions use seconds for everything.

In any event, as long as lifetime is not exceeded a regular user can still change his expired password.

You can easily enable a lockout from either cause via modprpw -k user.

[vinod_25]

hi james

exptm ==> Password Expiration Time (default is 210 days)
lftm ==> Password Life Time (default is 180 days)

Regards

Vinod k

[Belinda Dermody]

Thanks Clay, that is better, I am just an old man that has trouble understand what I am reading, I fall asleep before I get to the end of the first paragraph, to old for this field after 42 years (in the adp field) and ready to retire... I am going to remove the lftm from my scripts and just use the exptm arg..