Password Shadow

[Danny Crisp]

Are the following /etc/default/security entries valid for a non-trusted system: -

PASSWORD_MAXDAYS=
PASSWORD_MINDAYS=
PASSWORD_WARNING=

Or does password shadowing need to be installed/configured first?

[Jeff Schussele]

Hi Danny,

Actually you need to convert to Trusted to get the use of those. I don't think just going with shadow PW will do it.

Rgds,
Jeff

[HGN]

Hi

I don't think they are valid for non-trusted system.

Rgds

HGN

[Patrick Wallek · Accepted solution]

For definitive information do a 'man security' and read it, especially for those entries you are interested in.

The PASSWORD_MAXDAYS and PASSWORD_MINDAYS do NOT apply to trusted systems (according to the man page). This makes sense since trusted systems have their own mechanism for these two items. So if it does NOT apply to trusted, then it SHOULD apply to untrusted or shadow environments.

The PASSWORD_WARNING applies only to local users on shadow password systems (again according to the man page).

RTFM - (Read The Fine Manpage) -- Man pages are your best friend in any Unix.