Information Security

Linux password aging and expiration

wowbelly 2017. 9. 29. 12:03

https://www.cyberciti.biz/tips/setting-off-password-aging-expiration.html



To list current aging type chage command as follows:

# chage -l vivek


Output:

Last password change : May 22, 2007 Password expires : never Password inactive : never Account expires : never Minimum number of days between password change : 0 Maximum number of days between password change : 99999 Number of days of warning before password expires : 7


To disable password aging / expiration for user foo, type command as follows and set:


 Minimum Password Age to 0
Maximum Password Age to 99999
Password Inactive to -1
Account Expiration Date to -1
Interactive mode command:


# chage username


 OR


# chage -I -1 -m 0 -M 99999 -E -1 username

Updated for accuracy.





Unless your server is converted to trusted which means you have the /tcb directory , the /etc/default/security file and all its parameters work.

Without converting to a trusted system , the password aging policies dont work, except the changes which you can do with /etc/passwd file for the non-trusted systems.


'Information Security' 카테고리의 다른 글

Registry setting for Pagefile Clear at shutdown   (0) 2017.09.29
Windows AutoLogon Enabling/Disabling  (0) 2017.09.29
보안뉴스 번역기사 원문 찾기  (0) 2017.06.21
웹보안  (0) 2017.06.21
레지스터  (0) 2017.06.21