How to determine WHEN a password expires

[OFC_EDM]

From reading posts in the forum I've learned that users with Password Aging enabled will have 4 characters preceeded with a comma in the the password field.

Example:
user1:azcy1Z048POVc,7.VR:100:20::/home/user1:/usr/bin/ksh

So in the above example what does the
,7.VR
represent?

Is it the number of days until the password expires?

If so HOW can a decrypt how many days?

Cheers

p.s. this is for a non-trusted HP11i system.

[A. Clay Stephenson · Accepted solution]

No matter what you are told, you can't. However, it is possible to know the number of weeks because the week is the quantum for an untrusted system. Okay, if the week is less than 1 then you can know the number of days because the weeks change on Thursdays. That's because 1-Jan-1970 (the day the earth was created from UNIX's perspective) fell on a Thursday.

The attached perl script script will do the trick:

pwleft.pl user1 user2 ...

[James R. Ferguson]

Hi Kevin:

See the manpages for 'passwd(4)'. The section headed "Password Field" describes how to interpret the age.

http://docs.hp.com/en/B2355-60127/passwd.4.html

Regards!

...JRF...

[Sandman!]

Hi Kevin,

The string ",7.VR" should be interpreted as follows ",max min" weeks:

"," delimits the password aging from the encrypted password.
"7" == 9 weeks i.e. user must change password after 9 weeks.
"." == 0 weeks i.e. user cannot change password before 9 weeks.

cheers!

[James R. Ferguson]

Hi (again) Kevin:

See also 'logins':

# logins -al user

Regards!

...JRF...

[James R. Ferguson]

Hi Kevin:

BTW. Please see the latest responses in:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1009292

Regards!

...JRF...

[Arturo Galbiati]

Hi Kevin,
to see when password will expire you can use the pwage command.
HTH,
Art

[OFC_EDM]

Wow,
Nice to come in to work early this morning and see all your responses.

I'll enjoy reading them over a fresh coffee.

Arturo...Is that pwage command a 3rd party command? Or which version of HP-UX are you on because I can't find it on any of my HP-UX 11i servers.

Cheers,
Kevin