That is NOT what you want :)
True, it stops the user from changing his
password ... in fact, it stops him from doing
ANYTHING as he won't be able to login.
What you want is
passwd -n MIN <login-name>
which won't allow the user to change the
password for MIN days.
With MIN=10000 you'd be looking at 27 odd years
before they can change it ;)
The fourth column of /etc/shadow holds the number
of days before the password may be changed.
man 5 shadow
Last edited by Tinkster; 08-31-2004 at 04:17 AM.