SUMMARY: C2 and password lifetime expiring via CLI

From: John Losey (JLosey@Solucient.com)
Date: Mon Apr 15 2002 - 18:50:38 EDT


Many thanks for the quick replies...

I was reminded of the passwd_lifetime variable. So for the tool, before it
calls 'passwd $USERNAME', it is now calling:
usermod -x passwd_lifetime=0 $USERNAME

Followed by "usermod -x passwd_lifetime=365" to reset it back to a 1 year
lifetime.

The subroutine looks something like this:
usermod -x passwd_lifetime=0 $USERNAME
passwd $USERNAME
usermod -x passwd_lifetime=365 -x administrative_lock_applied=0 $USERNAME

This got us around the errors:
Password not changed: password lifetime has passed.

John

-----Original Message-----
From: John Losey [mailto:JLosey@Solucient.com]
Sent: Monday, April 15, 2002 2:30 PM
To: Tru64 UNIX Managers Group (E-mail)
Subject: C2 and password lifetime expiring via CLI

We're running 4.0f with C2 enabled and some of our users have a password
lifetime of 1 year. When the password lifetime expires, attempting to use
'passwd' to set the password will return with a message saying that "the
password lifetime has expired". We've found that if we use 'dxaccounts' to
set a password for a user, we're then able to use 'passwd' for the user
again.
Is there a command line way to reset the password lifetime so that it isn't
expired so that we can use passwd on the accounts?
The only reason I'm asking is that we've written a wrapper script for our
Tech Support that allows them to change passwords for users and it uses
passwd to do this. But for the users whose lifetime has expired, they have
to e-mail me and I set a bogus password with dxaccounts so that Tech Support
can use the tool that calls passwd. I'd really like to be able to add a
menu option to their tool that would allow them to be able to do this on
their own. But w/o knowing the CLI way of doing it, I can't script it.
Thanks,
John



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:48:38 EDT