Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

Users get prompted for password, and according to the lsuser -f username output:

expires=0
maxexpired=-1
maxage=13

users shouldn't be prompted for changing password.

Why does he has a change password prompt when logging in?

P.S.:

  1. According to maxage+last password update, his password expired at:

    Mon Sep 27 16:26:32 CEST 2010
    

    but the maxexpired=-1 should take care of this, and the user shouldn't be prompted to change the pasaword.

  2. oslevel -s
    6100-02-02-0849
    
share|improve this question

1 Answer 1

up vote 2 down vote accepted

The maxexpired attribute is the number of weeks after password expiration that a user is allowed to login (and change their password). A setting of -1 disables this restriction. Setting maxexpired=-1 prevents account lockout due to expired passwords; a new password must still be set once the maxage weeks have elapsed since the last password change.

maxage is the attribute that determines the password expiration. Your example has passwords expire 13 weeks after they are set. If you wish to have an account with no password expiration, set maxage=0.

Since you included the expires attribute: expires is the date when the account expires, not its password. Setting this to 0 means the account does not expire. maxage will still determine the password expiration.

share|improve this answer
    
p.s.: the user was prompted to change password because it's default shell was the passwd's binary... :) –  LanceBaynes Nov 11 '11 at 9:08

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.