02-23-2008
Passwords are held in the /etc/shadow, owned by root and permission 400.
Man -a password will give you the layout of the colon separated fields.
Note the number in the expiry field is the number of days since the 1st January 1970 (the epoch)
Also be aware output of date command depends on your LOCALE variable
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Hi,
under SUN Unix, in which file the expiry date of a user password is indicated ?
Many thanks. (2 Replies)
Discussion started by: big123456
2 Replies
2. HP-UX
Hi,
we are having the installed cerificates in our unix server's.
The certificates are in following format : cacert.pem,cert8.db,ois294.sem,CertGenCAKey.der,ss_keystore.jks
So i want to know the Expiry date for these certificates. how to get the valid FROM to TO dates for these kind of... (1 Reply)
Discussion started by: srujana
1 Replies
3. Shell Programming and Scripting
Hi,
Can anyone suggest, how or from where we can understand the expiry time of a linux id, whether login or ftp?
My concern is like, i want to know when the ftpid configured on an automated system will expire, so that i can configure some notice or email mentioning that the particular id... (1 Reply)
Discussion started by: DILEEP410
1 Replies
4. Shell Programming and Scripting
Hi,
Could someone please let me know how to write script for passwd expiry notification on salaries boxes.
Regards
Dnyan (1 Reply)
Discussion started by: dnyan
1 Replies
5. Solaris
Hi
How do i disable password expiration on ldap?
It runs on Solaris 10 machine. Thanks in advance. (3 Replies)
Discussion started by: hrist
3 Replies
6. Solaris
Hi Folks,
I have Solaris 10, latest release.
We have passwd aging set in /etc/defalut/passwd.
I have an account that passwd should never expire. Acheived by emptying associated users shadow file entries for passwd aging.
When I reset the users passwd using passwd command, it re enables... (3 Replies)
Discussion started by: BG_JrAdmin
3 Replies
7. AIX
Hi
When a new user is created and their password is set to require changing at first login, is it possible to expire the account if they don't login whithin 10 days ?
Thanks
Nigel (4 Replies)
Discussion started by: garwoon
4 Replies
8. AIX
Does anyone know when AIX started using /etc/security/passwd instead of /etc/passwd to store encrypted passwords? (1 Reply)
Discussion started by: Anne Neville
1 Replies
9. Shell Programming and Scripting
Hi, I'm trying to set password expiry notification. But unable to do so.
>I do not have permission for "passwd -s" on Sun OS(SunOS 5.9 Generic_122300-60 sun4u sparc SUNW,Sun-Fire-480R).
>Also tried "chage -l <username>" but it is not configured.
I'm just an appln user in that system. Could... (2 Replies)
Discussion started by: sam_bd
2 Replies
10. Shell Programming and Scripting
Hi folks,
Need a bash shell script to find the expiry users in next 5 days in Linux using the command chage and dump the output to another file (1 Reply)
Discussion started by: gsiva
1 Replies
LEARN ABOUT CENTOS
certwatch
CERTWATCH(1) Cryptography Utilities CERTWATCH(1)
NAME
certwatch - generate SSL certificate expiry warnings
SYNOPSIS
certwatch [OPTION...] filename
DESCRIPTION
The certwatch program is used to issue warning mail when an SSL certificate is about to expire.
The program has two modes of operation: normal mode and quiet mode. In normal mode, the certificate given by the filename argument is
examined, and a warning email is issued to standard output if the certificate is outside its validity period, or approaching expiry. If the
certificate cannot be found, or any errors occur whilst parsing the certificate, the certificate is ignored and no output is produced. In
quiet mode, no output is given, but the exit status can still be used.
The certificate can be specified by its nickname or by a path to the containing file.
OPTIONS
--quiet, -q
Enable quiet mode; no output is produced whether the certificate is expired or not
--period days, -p days
Specify the number of days within which an expiry warning will be produced; default is 30. Expiry warnings are always produced if, on
the day of invocation, the certificate is not yet valid, has already expired, or is due to expire either that day or the following day.
--address address, -a address
Specify the address used in the To field of the warning e-mail issued if quiet mode is not enabled. The default is root.
--directory cert-directory, -d cert-directory
Specify the database directory containing the certificate and key database files. The default is yet to be determined.
DIAGNOSTICS
The exit code indicates the state of the certificate:
0
The certificate is outside its validity period, or approaching expiry
1
The certificate is inside its validity period, or could not be parsed
NOTES
The certwatch program is run daily by crond from the file /etc/cron.daily/certwatch to generate warning mail concerning the imminent expiry
of SSL certificates configured for use in the Apache HTTP server. These warnings can be disabled by adding the line: NOCERTWATCH=yes to the
file /etc/sysconfig/httpd. Additional options to pass to certwatch can be specified in that file in the CERTWATCH_OPTS environment
variable.
FILES
/etc/cron.daily/certwatch, /etc/sysconfig/httpd
SEE ALSO
genkey(1)
crypto-utils 2.4.1 9 June 2014 CERTWATCH(1)