Best Practice on Managing Passwords for Multiple Users on Linux Systems?
 

I'm managing multiple Linux boxes that have multiple users.

I am familiar with how to unlock account, force users to change their passwords once they log in and have their account expire after a certain number of days.

My concern is that say if a user account expires, will they have so many days to reset the password before the account is locked or does the account become locked/disabled without any chance to reset the password?

Is there any man pages to read up on this or any type of documentation?

thanks

Yes. You will manage this with PAM.

http://tldp.org/HOWTO/User-Authentic...OWTO/x115.html
https://access.redhat.com/documentat...n_Modules.html

Usually I would mention how to do this, but there is a LOT to read about it. This is a wonderful system to read and understand.

If you want centralized authentication: http://www.freeipa.org/page/About