Last password change of the user account is getting automatically changed - weird issue

[Arun123456]

one of the user acocunt password is not working  mnay times during different  time period and after resetting the passowrd it is working.  what I observed is that the last passowrd chnage date of the user acocunt is always getting restored to an older date though there is no chnage in  encrypted password in /etc/shadow file.

1: oracle account password chnaged manually as part of testing

2: took /etc/shadow file backup as shadow.old_bforaclepassChange

3 : When I check the user acount status today, it shows the paasowrd got chnaged few days back though the chnage is done yesterday.

4: checkied the encrypted passoword of the current and showdow bakcup file. both looks similar. but the password change got chnaged to older date.

home/aparun>logins -x -l oracle
oracle 199 dba 201 Oracle Software,,,
/home/oracle
/usr/bin/ksh
PS 092818 -1 -1 -1
(**root)
/home/aparun>passwd oracle

 /home/aparun>cat shadow.old_bforaclepassChange | grep -i oracle
oracle:9s7kmRT1X/AMU:17802::::::

/home/aparun>cat /etc/shadow | grep -i oracle
oracle:9s7kmRT1X/AMU:17802::::::

5 password changed

/home/aparun>logins -x -l oracle
oracle 199 dba 201 Oracle Software,,,
/home/oracle
/usr/bin/ksh
PS 102518 -1 -1 -1

Encrypted password also changed.

/home/aparun>logins -x -l oracle
oracle 199 dba 201 Oracle Software,,,
/home/oracle
/usr/bin/ksh
PS 102518 -1 -1 -1
(**root**on )

[Arun123456]

May I get any update from experts.

[RajUX]

Hi Arun, what is the OS version in this case? and is the issue with any other user also? all users are affected?

Do you change in modification time of /etc/shadow also?