password aging

[Cifs 9000]

system hp 11.0

we are using non - trusted system
we are using kerberos and pam.

but i want password aging how can i use it

# passwd -r files -f -x 70 -n 7 testuser
I tried this after I go this message

HP-UX xyz.abcd.com B.11.11 U 9000/800 (tb)

login: testuser
Password:
Your password has expired. Choose a new one
Changing password for testuser
Sorry.
login:

[Court Campbell]

> HP-UX xyz.abcd.com B.11.11 U 9000/800 (tb)

sure you are not 11.11?

you can install shadow passwords to get this functionality.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

[A. Clay Stephenson]

You don't have to be a trusted or shadowed system for password aging and minimum time between password changes to work. In fact, this functionality has been in UNIX since the dawn of time even with NIS. No other form of password expiration is possible with the vanilla passwd file. You should note that although you specify the values in days the actual resolution is weeks because of how the data are encoded. The weeks actually end on Thurdays because 1-Jan-1970 fell on a Thursday.

[Dennis Handly]

>Clay: The weeks actually end on Thurdays

That's only if you are near GMT. In the US, it ends on Wed.

[Cifs 9000]

In Hp-ux 11.0 , I don't think we can install shadow password if yes please let me know.

2. we r not using trusted system how to password aging or with any script can be force user to change password within 90 days.

3. I could not understand about 1970, thrusday thing. Could u please explain me.

[Dennis Handly]

The password aging is encoded in the 4 chars that are after the "," in the password field in passwd(4).

The granularity is in terms of weeks since the start of the Epoch, which was Thursday, Jan 1, 1970 as Clay mentioned

See:
http://docs.hp.com/en/B2355-60130/passwd.4.html