password aging

[Michael Murphy_2]

Hello - I SA a system that requires password resets every 60 days. I have remote clients that use telnet and ftp - they complain every 60 days (they need to reset passwords in their jobs). Anyone know of an way to have the OS run a job or email before resetting (or is their a command to see how many days left before reset?). Don't think sftp or scp will help since they react to resets as well (even though they mostly use keys). Some folks have recommended third-party products (connect:direct) - not sure if that would help. Thanks in advance...Mike

[Rick Garland]

On login, the OS will tell you how long is left on the current passwd, assuming time is getting close.

[RAC_1 · Accepted solution]

You can put up a script to do so. If system in trusted mode, you can set exptm setting to warn user about expiry of password. If non trusted mode, passwd -w "warning_time_in_days"

man passwd
man getprpw, man modprpw for details.

Anil

[lawrenzo]

as far as I know I dont think there is any tool that will mail when a user passowrd is about to expire?

you can set passowrd warning and aging in same so for example passowrd expire in 60dya but warn after 50 days.

a maeesage will be displayed when the user logs in.

HTH

[Isralyn Manalac_1]

Hi Michael,

If you have set the password expiration warning time, upon login, the user will be notified that his/her password is about to expire in X days.

Regards,

Isralyn

[wip]

Password aging can be best implemented by making a system trusted.It not only provide enahnaced user security/restrictions also provide /tcb authentication