minumum time between password resets

[generic_1]

I have a system that is giving me an error pertaining to the minumum time between password changes on a system. I was wondering if there is a file specifies teh location of the /etc/default/securetty and if it can be moved to a new location. Also, what options can I use to change this if this was set using modprpw, and what field would I want to check on its current settings with getprpw. Many Thanks

[Dave Olker]

Hi Jeff,

I'm not sure what you mean by a file that specifies where the securetty file is. Do you mean which file references the securetty file?

As far as the time between password changes, you can view the current time via the getprpw command and change them using the modprpw command.

You should be able to view the current "min time between passwd changes" field via the command:

# getprpw -m mintm

and modify it via the command:

# modprpw -m mintm=

Regards,

Dave

[Dave Olker]

By the way, did you mean /etc/default/security as opposed to /etc/default/securetty?

Dave

[Dave Olker]

If your question was whether there was a way to change the location of the /etc/default/security file, the answer is "no".

This file path is hard-coded into the function open_secdef(), which is called by commands like login, passwd, etc. There is no way to override this file path, although you could probably create a symbolically linked file at this location if you really wanted to move it somewhere else. But as far as pointing login and passwd to a file other than /etc/default/security for their definitions, there is no way to do that.

Regards,

Dave

[Steven E. Protter]

1) Can not move the file
2) You can as root manipulate the contents to set the minimum time between password changes to any number you want.

/etc/default/security


SEP

[Muthukumar_5]

We cannot (not good) to move default security file to another place. And by the by it is security not securetty. securetty is used to give restriction on user login terminal types. (/etc/securetty)

You can get the details of passwd expiration information as,

getprpw -m username
variables are,

exptm password expiration time
lftm password lifetime
acctexp account expiration time
expwarn password expiration warning time

You can get the details with that,

To change use the same format with modprpw -m value username

You can know more informations about variables over prpwd.4 man page

Regards
Muthu