userID passwd security

[YLTan]

does anyone know if HP Trusted Passwd System support inactive period for each userID and can it be configure to delete inactive userid after some defined period?

does u_exp and u_life serve this purpose?

[Darren Prior]

Hi,

You cannot _delete_ inactive userids, but you can disable them through password ageing. When the password lifetime is reached the account is locked and requires the superuser to unlock it. You could script something to run userdel if an account is locked, but it seems a bit extreme to me as they cannot login!

u_exp and u_life are documented in the man page for prpwd(4). The supported way of modifying these values is through SAM; there's also some context based help there too ;-)

regards,

Darren.