Solaris

does anyone know in solaris 10, can you lock an account if the user does not change their password within a certain amount of time?

What i want to do is, if a user doesnt change their password within 90 days, i want the account locked.

This is similar to the redhat linux passwd -i command.

All i can see now, is the passwd will expire, but if the person logs in a year later, they will still just be able to change their password at that time.

any ideas? i looked thru the passwd man page and the pam man pages, i dont see anything that is equivilent to the passwd -i command in linux.

passwd -x ??

Passwd -x will expire the password. and make the user change it the next time they log in.

I want to lock the account if the user doesnt login in a period of time.

"passwd -x 90 testuser" will make the password expire at 90 days old.

In linux (RHEL), i addition to this I can now do:

"passwd -i 7 testuser" and that will lock the account 7 days after the password expires, thus they can not even login by changing their password. They would have to call me to unlock it.

The Solaris 10 shadow file has an "inactive" field, and I thought this would do the same thing, but it does not seem to be working. So I was wondering if anyone had dome anything like this with solaris 10 yet without writing a custom script.

Sorry I misread your OP

passmgmt -f in combintation with passwd -x might give you something to work with. It would also lock the accounts if they are idle, it's not quite what you wanted but it's as close as I can think of right now, without doing something ugly like using the root crontab.