No expiration time user in trusted system

[Tony Chiu]

Dear all,

I am planning to convert all the UNIX servers to trusted systems. I wonder whether it would be sufficient 'secure' to give exemption to some user accounts with no expiration time password if the login shells are /usr/bin/false or /usr/bin/rksh.

Please give me advice. Thanks.

[Victor BERRIDGE]

Yes of course, since once trusted, if I remember right you will have by default the right to 3 bad passwd before account will be deactivated, by the way how many users are concerned?
Will it be you that will reactivate the accounts after?...
Think carefully what will be your policy!

Best regards
Victor