Password Aging

Ratclaws · 09-08-2006, 10:19 AM

I wanted to set my box to do the following automatically:
expire password after x days, warn user of expiring passwd after x days,
disable accounts after x days, etc.

I found the following url which showed everything i've already tried:
http://www.europe.redhat.com/documen...-cmd-line.php3

However i did notice that it says this is only effective for console
users, and does nothing for ssh users. That sounds like a microsoft idea.

How can I do this properly? (Without recommending ldap, that is a future
project).

w3bd3vil · 09-08-2006, 01:13 PM

you probably misunderstood a statment there. If you use chage, it will be effective to that user, regardless of where he tries to login from.

magnus.therning · 09-15-2006, 06:27 AM

Quote:

Originally Posted by w3bd3vil

you probably misunderstood a statment there. If you use chage, it will be effective to that user, regardless of where he tries to login from.

It's easy to be confused by their statement.

If the password has expired (chage -d 0 <user>) then loging in with SSH fails. It prompts for a password change, but I haven't been able to successfully provide a new one. So, using that particular procedure to force a user to change password on first login doesn't work if the user uses SSH to log in. he will simply not have access to his account until he logs in at a terminal.