I have a server where MAXWEEKS is set to 13 in etc/default/passwd. I know that this setting means that password will expire after 13 weeks. My question is if the user does NOT change the password, does the account become locked out after this or does the system will force the user to change the password when the user logon? What setting can be set to automatically revoke access after certain weeks on inactivity?
The MAXWEEKS only sets the amount of time a certain password may be used before the user if forced to change it. The user will get a prompt with a request to change the password before the user can further login to the system.
Locking of an account after a period of inactivity requires a more advanced authorization management tool. NIS+ might be something on Solaris that can do this for you.