[prev in list] [next in list] [prev in thread] [next in thread] 

List:       aix-l
Subject:    Re: Password Expiration on 5.2
From:       "Hunter, Mark" <Mark.Hunter () ANHEUSER-BUSCH ! COM>
Date:       2006-06-29 15:39:41
Message-ID: 09C096BBD0CB2244B0B176300BEDD65A12529FC8 () exchange-USR32
[Download RAW message or body]

Rather than changing each user, change the default user stanza in
/etc/security/user.  It will apply to all users unless they have an override
value..
 
Mark Hunter 
Anheuser-Busch Cos. 
MIS Consultant, ES&SO Server Planning and Integration 
*Office:        (314) 632-6663 
*Fax:           (314) 632-6901 
?Pager:                         (314) 841-4026 
*Email:         Mark.Hunter@Anheuser-Busch.com 

The information transmitted (including attachments) is covered by the Electronic
Communications Privacy Act, 18 U.S.C. 2510-2521, is intended only for the
person(s) or entity/entities to which it is addressed and may contain
confidential and/or privileged material. Any review, retransmission,
dissemination or other use of, or taking of any action in reliance upon, this
information by persons or entities other than the intended recipient(s) is
prohibited. If you received this in error, please contact the sender and delete
the material from any computer.



  _____  

From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU] On Behalf Of Green,
Simon
Sent: Thursday, June 29, 2006 10:16 AM
To: aix-l@Princeton.EDU
Subject: Re: Password Expiration on 5.2


No!
You want the MAX. AGE parameter.  That's in weeks, so either 4 or 5 for a month.
 
"Weeks between password EXPIRATION and LOCKOUT" means that after a password
expires, if it hasn't been updated 4 weeks later the userid gets locked, so it
can't be used at all - not even to set a new password - until an administrator
unlocks it.
 
If you've got a lot of users to co it's probably easier to use the chuser
command.
-- 
Simon Green                                                    
Altria ITSC Europe s.a.r.l.

AIX-L Archive at https://lists.princeton.edu/listserv/aix-l.html 

New to AIX? http://publib-b.boulder.ibm.com/redbooks.nsf/portals/UNIX 

N.B. Unsolicited email from vendors will not be appreciated. 
Please post all follow-ups to the list. 

	-----Original Message-----
	From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU] On Behalf Of
Larry Scheetz
	Sent: 29 June 2006 15:18
	To: aix-l@Princeton.EDU
	Subject: Password Expiration on 5.2
	
	
	Admins,

	I am trying to setup all user to have their password expire every 30
days.  I have made two changes in "smit passwdattrs" and they are below.  I want
to make sure that the system will expire a user's password every month (30 days)
and it will warn them 3 days before it is going to expire.  Would the below
changes be correct?  Looks like the default Weeks between Expiration was -1.
Any help would be appreciated.

	 

	Days to WARN USER before password expires [3]

	Weeks between password EXPIRATION and LOCKOUT [4]

	Thanks Larry


The information transmitted (including attachments) is
covered by the Electronic Communications Privacy Act,
18 U.S.C. 2510-2521, is intended only for the person(s) or
entity/entities to which it is addressed and may contain
confidential and/or privileged material. Any review,
retransmission, dissemination or other use of, or taking
of any action in reliance upon, this information by persons
or entities other than the intended recipient(s) is prohibited.
If you received this in error, please contact the sender and
delete the material from any computer.

[Attachment #3 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2873" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=140073815-29062006><FONT face=Arial 
color=#0000ff size=2>Rather than changing each user, change the default user 
stanza in /etc/security/user.&nbsp; It will apply to all users unless they have 
an override value..</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=140073815-29062006><FONT face=Arial 
color=#0000ff size=2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=ltr align=left><SPAN class=140073815-29062006><!-- Converted from text/rtf \
format --> <P><I><FONT face=Tahoma color=#800000>Mark Hunter</FONT></I> <BR><FONT 
face="MS Sans Serif" color=#000000 size=1>Anheuser-Busch Cos.</FONT> <BR><FONT 
face=Tahoma size=2>MIS Consultant, ES&amp;SO Server Planning and 
Integration</FONT> <BR><FONT face=Wingdings color=#0000ff>(</FONT><FONT 
face="MS Sans Serif" size=2>Office: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (314) 
632-6663</FONT> <BR><FONT face=Webdings color=#0000ff>&Ecirc;</FONT><FONT 
face="MS Sans Serif" size=2>Fax:&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (314) 632-6901</FONT> <BR><FONT 
face=Webdings color=#0000ff size=2>?</FONT><FONT face="MS Sans Serif" 
size=2>Pager: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 (314) 841-4026</FONT> <BR><FONT face=Wingdings color=#0000ff>*</FONT><FONT 
face="MS Sans Serif" size=2>Email: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
Mark.Hunter@Anheuser-Busch.com</FONT> </P>
<P><FONT face=Tahoma color=#800080 size=2>The information transmitted (including 
attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 
2510-2521, is intended only for the person(s) or entity/entities to which it is 
addressed and may contain confidential and/or privileged material. Any review, 
retransmission, dissemination or other use of, or taking of any action in 
reliance upon, this information by persons or entities other than the intended 
recipient(s) is prohibited. If you received this in error, please contact the 
sender and delete the material from any 
computer.</FONT></P><BR></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> IBM AIX Discussion List 
[mailto:aix-l@Princeton.EDU] <B>On Behalf Of </B>Green, Simon<BR><B>Sent:</B> 
Thursday, June 29, 2006 10:16 AM<BR><B>To:</B> 
aix-l@Princeton.EDU<BR><B>Subject:</B> Re: Password Expiration on 
5.2<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><SPAN class=762401215-29062006><FONT face=Arial color=#0000ff 
size=2>No!</FONT></SPAN></DIV>
<DIV><SPAN class=762401215-29062006><FONT face=Arial color=#0000ff size=2>You 
want the MAX. AGE parameter.&nbsp; That's in weeks, so either 4 or 5 for a 
month.</FONT></SPAN></DIV>
<DIV><SPAN class=762401215-29062006><FONT face=Arial color=#0000ff 
size=2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=762401215-29062006><FONT face=Arial color=#0000ff size=2>"Weeks 
between password EXPIRATION and LOCKOUT" means that after a password expires, if 
it hasn't been updated 4 weeks later the userid gets locked, so it can't be used 
at all - not even to set a new password -&nbsp;until an administrator unlocks 
it.</FONT></SPAN></DIV>
<DIV><SPAN class=762401215-29062006><FONT face=Arial color=#0000ff 
size=2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=762401215-29062006><FONT face=Arial color=#0000ff size=2>If 
you've got a lot of users to co it's probably easier to use the chuser 
command.</FONT></SPAN></DIV>
<DIV><SPAN class=762401215-29062006><!-- Converted from text/rtf format -->
<P><SPAN lang=en-au><B><FONT face=Arial color=#808080 size=2>-- 
</FONT></B></SPAN><BR><SPAN lang=en-au><B><FONT face=Arial color=#808080 
size=2>Simon Green&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<BR></FONT></B></SPAN><B><SPAN 
lang=en-us><FONT face=Arial color=#808080 size=2>Altria ITSC Europe 
s.a.r.l.</FONT></SPAN><SPAN lang=en-au><BR></SPAN><SPAN lang=en-au></SPAN><SPAN 
lang=en-gb></SPAN></B><SPAN lang=en-gb></SPAN><SPAN lang=en-gb></SPAN><BR><SPAN 
lang=en-gb><B><FONT face=Arial color=#808080 size=2>AIX-L Archive at <A 
href="https://lists.princeton.edu/listserv/aix-l.html">https://lists.princeton.edu/listserv/aix-l.html</A></FONT></B></SPAN> \
 </P>
<P><SPAN lang=en-gb><B><FONT face=Arial color=#808080 size=2>New to AIX? <A 
href="http://publib-b.boulder.ibm.com/redbooks.nsf/portals/UNIX">http://publib-b.boulder.ibm.com/redbooks.nsf/portals/UNIX</A></FONT></B></SPAN> \
 </P>
<P><SPAN lang=en-gb><B><FONT face=Arial color=#808080 size=2>N.B. Unsolicited 
email from vendors will not be appreciated.</FONT></B></SPAN> <BR><SPAN 
lang=en-gb><B><FONT face=Arial color=#808080 size=2>Please post all follow-ups 
to the list.</FONT></B></SPAN> </P></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
  <DIV></DIV>
  <DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT 
  face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> IBM AIX 
  Discussion List [mailto:aix-l@Princeton.EDU] <B>On Behalf Of </B>Larry 
  Scheetz<BR><B>Sent:</B> 29 June 2006 15:18<BR><B>To:</B> 
  aix-l@Princeton.EDU<BR><B>Subject:</B> Password Expiration on 
  5.2<BR><BR></FONT></DIV>
  <DIV><EM><FONT face="Century Gothic"><FONT face=r_ansi>
  <P><SPAN class=072111314-29062006><FONT face="Century Gothic" color=#800080 
  size=2>Admins,</FONT></SPAN></P>
  <P><SPAN class=072111314-29062006><FONT face="Century Gothic" color=#800080 
  size=2>I am trying to setup all user to have their password expire every 30 
  days.&nbsp; I have made two changes in "smit passwdattrs" and they are 
  below.&nbsp; I want to make sure that the system will expire a user's password 
  every month (30 days) and it will warn them 3 days before it is going to 
  expire.&nbsp; Would the below changes&nbsp;be correct?&nbsp; Looks like the 
  default Weeks between Expiration was -1.&nbsp; Any help would be 
  appreciated.</FONT></SPAN></P>
  <P><FONT face="Century Gothic" color=#800080 size=2></FONT>&nbsp;</P>
  <P><FONT color=#800080 size=2>Days to WARN USER before password expires 
  [3]</FONT></P>
  <P><FONT color=#800080 size=2>Weeks between password EXPIRATION and LOCKOUT 
  [4]</FONT></P>
  <P><FONT face="Century Gothic" color=#800080 size=2><SPAN 
  class=072111314-29062006>Thanks 
  Larry</SPAN></FONT></P></FONT></FONT></EM></DIV></BLOCKQUOTE></BODY></HTML>

<pre>The information transmitted (including attachments) is
covered by the Electronic Communications Privacy Act,
18 U.S.C. 2510-2521, is intended only for the person(s) or
entity/entities to which it is addressed and may contain
confidential and/or privileged material. Any review,
retransmission, dissemination or other use of, or taking
of any action in reliance upon, this information by persons
or entities other than the intended recipient(s) is prohibited.
If you received this in error, please contact the sender and
delete the material from any computer.



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic