Password expiration message

[chindi]

Hi ,

We would like to get password expiration warning message if it matches WARN_DAYS set in /etc/default/security file.

We are having trusted systems .

P.S. This thread has been moved from HP-UX > System Administration to HP-UX > security. - Hp forum Moderator

[chindi]

Its only enabled for shadow systems it seems.
Howdo we convert trusted system to shadow system
What are the benefits ? What precautions to be taken to convert it in production environment ? Its 11iv3 ..Does HP recommend the same?

[RJHall]

My understanding is that (most of) the functionality of trusted systems was integrated into the OS as of 11i v3. See pwconv(1M) and security(4).

[chindi]

Hi ,

Thats fine , but how do we implement the same in 11iv3 ?

Went through pwconv and security , but couldnt understand .

[KathyL1]

We've been using the attached script (run as a cron job early each morning) on our Trusted systems for more than 10 years - it ensures users receive a warning message about password expiry after the standard 'motd' file is displayed.

[chindi]

Hi ,

We are not able to check output of this script.

Bcoz its not logging any where the output , secondly we need to manually create .motd files for all users right ??

Standard motd file is /etc/motd

[KathyL1 · Accepted solution]

The script doesn't produce any output - it simply does what it's supposed to do.

If you read through the script you'll see that it creates a file named '.motd' in the user's home directory - the system will automatically display this file after the standard motd file (ie, /etc/motd) when the user logs in.

If you want to see how it works set a user's password to expire in less than the configured warning time.

[chindi]

Thanks KathyL1.