AIX

Guy's ..

I have faced an issue in AIX server, users got expired without asking me about the expiration and did not asking me to change the old password moreover will not accept my login with old password any more until reset the ID with new password

Pls assist in this to how configure the server to let it ask to change the password before expire !


Pls assist .. !

Hi.

Have a look at changing the value of pwdwarntime in /etc/security/user

Other settings such as maxexpired determine the time past which you cannot change an expired password.

Look at the chuser command man page, it explains what's possible.

The rules for AIX password expiration are defined in /etc/security/user. "maxage" is the number of weeks a password is valid. "maxexpired" defines the number of weeks that the password can be changed by the user even after "maxage" weeks went by. From AIX 4 on the user gets a warning that his password needs to be changed in "pwdwarntime" days before the account is locked. However, this warning is visible during login only. If the user does not login for months this mechanism is bound to fail. Thus in your case you might use a script to send an email to the user ahead of final expiration.

For user friendly interface, can use smitty as well:

Adv:
- to avoid any typical typo
- user friendly interface

Disadv:
- cant be done in Global environment (need to do this setting for each user)

# smitty user
-> Change / Show Characteristics of a User -> Select user

-> EXPIRATION date (MMDDhhmmyy) [0]
(this is for temporary user, you can define the expiry date)

-> Number of FAILED LOGINS before [0]
user account is locked
(Define how many times of failed login attempt before lock the ID)

-> Days to WARN USER before password expires [0]
(how many days to notify the user before the ID expired)

-> NUMBER OF PASSWORDS before reuse [0]
(password life cycle/password rotation generation. e.g if you set 3,you must have 3 different passwd over times in order to use back the 1st gen password)

-> Weeks between password EXPIRATION and LOCKOUT [-1]
(to lock the user after how many weeks after the password expired. -1 means never)

->Password MAX. AGE [0]
(how long the password can last - in WEEKS)

Hope this info can help you.
Regards,
Fadzli
Malaysia