setting up Password Aging

[Ow Mun Heng]

On Mon, 2004-06-14 at 17:44, Ow Mun Heng wrote:
> Guys,
> 
> 	I need to understand the options for useradd (as per below) 
> 
> My needs are this. I want to add a user, with a default password and
> give then a grace period of say 7 days before they have to change their
> password else their account is disabled. I don't care about maximum
> days. (since they are syncing their passwords with the Windows Domain)
> 
> So.. I take it I need 
> 
> useradd -m 7 

username:$@#aAS1bf$wDRVc2d8UersMbJ90qKKb.:12584:7:99999::1::

will this do?? 
7 = days grace period before password must be changed.

99999 = days is the validity after the user has changed their password

1 = days after the grace period when the account is disabled?


> is enough for my needs?
> 
> -m days
> Specify the minimum number of days between which the user must change
> passwords. If the value is 0, the password does not expire
> 
> .-M days
> Specify the maximum number of days for which the password is valid. When
> the number of days specified by this option plus the number of days
> specified with the -d option is less than the current day, the user must
> change passwords before using the account.-d daysSpecify the number of
> days since January 1, 1970 the password was changed.
> 
> -I days
> Specify the number of inactive days after the password expiration before
> locking the account. If the value is 0, the account is not locked after
> the password expires.
> 
> 
> 
> 
> -- 
--