Best Practice on Managing Passwords for Multiple Users on Linux Systems?

JockVSJock · 10-21-2014, 08:12 AM

I'm managing multiple Linux boxes that have multiple users.

I am familiar with how to unlock account, force users to change their passwords once they log in and have their account expire after a certain number of days.

My concern is that say if a user account expires, will they have so many days to reset the password before the account is locked or does the account become locked/disabled without any chance to reset the password?

Is there any man pages to read up on this or any type of documentation?

thanks

szboardstretcher · 10-21-2014, 08:28 AM

Yes. You will manage this with PAM.

http://tldp.org/HOWTO/User-Authentic...OWTO/x115.html
https://access.redhat.com/documentat...n_Modules.html

Usually I would mention how to do this, but there is a LOT to read about it. This is a wonderful system to read and understand.

If you want centralized authentication: http://www.freeipa.org/page/About