usermod command

[Sunil Sharma_1]

Hi,

I want to lock users after inactive for 180 days. Man page of umask says it can be done with
umask -f 180
but when i issue this command i get error message sayin "Option f requires security package"

What security package it is looking for ?
Sunil

[Sridhar Bhaskarla · Accepted solution]

Sunil,

It must be looking for the /tcb database that gets created when the system is trusted. You will need to convert the system to trusted.

-Sri

[Muthukumar_5]

Is it usermode -f

You have to make the trusted one there.

man page for usermod says as,
Unless enhanced security is installed, the -e and -f options are not
supported and will return an error.

[Franky_1]

Hi Sunil,

i've never heared about a "-f" option for umask.
You surely mean usermod !

usermod -f

Regards

Franky

[Muthukumar_5]

We can synchronize the action of usermod on trusted mode easily. It will take effect there and message "Option f requires security package" will not come there.


And more, why can not we concentrate on the passwd aging here instead of user account. Try to start the passwd aging there for that account and lock that as,

passwd -l

To release lock, super user has to do as,

passwd -df

so that it will delete old passwd and force the t select passwd next.