Hp-ux Does not prompt you to chnage password when agein g is enabled

[ladoo_1]

Hello,

I have an issues with 11.23 and 11.11 systems where we have the ageing enabled and the system does prompt them to change the password but it is very close to the banner is you are using putty or tera term it will go up without you seeing it ..So my question is let's say if I have a password that will expire in one week rather then showing a message where it will prompt the users to change the password .in other words if your password in the warning ageing it should prompt you to change it .(in force change when the password is in warning age ).

[TTr]

I have no idea what you are asking here. The only thing I gathered is from

> but it is very close to the banner is you are using putty or tera term it will go up without you seeing it

I think you are having terminal setting problems to say the least.

[Dennis Handly]

I never see any warning notices when my password expires. I just change it when I rarely do a rlogin to another computer.

>but it is very close to the banner if you are using putty or tera term it will go up without you seeing it

Are you saying that the message is hidden because the copyright and the motd scrolls it off the screen?
I never see my "Last successful login:" because it scrolls off and I don't really care about it to push the Page Up button.

[ladoo_1]

Is there a way if i am in the warning age let's say my password will expire in 20 days and the warning policy is set to 21 .is there a way to force the client to prompt them to chnage the password .

[OldSchool]

uuhhh...the warning period is the warning period whatever you set it to be...

the logic of having a 21 day "warning" and forcing them to change it 20 days in advance escapes me. Wouldn't that be the same behaviour as having a 1 day warning???

[Robert-Jan Goossens]

Hi,

You could create a script to warn your users with an email.

Trusted system - How to find user's passwords about to expire

http://www11.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c00905799-2

Regards,
Robert-Jan

[ladoo_1]

goossenes,

I am unable to get to it ..
Please check your login status. The content identified requires a support agreement, HP CarePack or warranty.

[Robert-Jan Goossens]

Hi,

I'm not allowed to copy docs from the itrc to the forum. Have a look at these threads for more info and scripts.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1029835

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=696912

Regards,
Robert-Jan

[Robert-Jan Goossens]

add on

https://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1180988

[Patrick Wallek]

When our users log in, they go directly to a menu so they never see this warning.

I execute a shell script from /etc/profile that will ask the user if they want to change it if the password is due to expire within 14 days.

This script assumes that your system is trusted. It also uses 'sudo' to execute the 'getprpw' command (that command is restricted to root use only -- sudo is set up with the nopasswd option for this command ONLY for all users) to determine when the passwd was last changed. The script the figures out how many days left before the password expires.

This script also uses A. Clay Stephensons caljd.sh program to do date conversions, so you will need to search the forums to find this.

The script, "check_passwd_expire_time.sh", is attached. It is fairly well documented, so hopefully it is fairly easy to understand.

[Robert-Jan Goossens]

Patrick,

links to shell and the perl version of A. Clay Stephensons caljd.sh script.

http://mirrors.develooper.com/hpux/caljd-2.25.sh

http://mirrors.develooper.com/hpux/caljd-2.2.pl

[Patrick Wallek]

Thanks Robert-Jan.

[ladoo_1]

Ok ,I am new to hp-ux and UNIX as well so can you please give me the steps where to place the scripts so it will work when the user login and they will run for very users that have there p/w set to expire very 90 days .Thanks for all the help ...

[Patrick Wallek]

It really does not matter where you place the files check_passwd_expire_time.sh and caljd.sh as long as everyone has read and execute permissions (555 / r-xr-xr-x) to the files).

I keep mine in /usr/local/bin.

I call the /usr/local/bin/check_passwd_expire_time.sh from /etc/profile.

Again please remember to look at the script itself as it does use sudo. If you don't have sudo you will need to get it or figure out some other way to get the date the password was last changed as the getprpw command is usable by root only.

[ladoo_1]

Can you please give me example of how did you add both the scripts to /etc/profile .

check_passwd_expire_time.sh and caljd.sh

thanks..

[ladoo_1]

I am sorry that i am replying so late i just strated to work on this ...thanks..