(9838) Password Management, Lifetime, Expiration?

Archive of the OpenVMS Ask the Wizard (ATW) questions and answers database.
Locked

Topic author
User
Visitor
Posts: 0
Joined: Mon Jan 10, 2022 8:16 am
Reputation: 0
Status: Offline

(9838) Password Management, Lifetime, Expiration?

Post by User » Sun Sep 12, 2004 9:26 am

I have noticed that when my password expires I get prompted for the old
password and then a new one.

Some of the users dont get this option the password simply expires and has to
be reset in authorize.

What needs to be done to enable the password to be changed at logon once it has
expired?


Wizard
Visitor
Posts: 0
Joined: Mon Jan 10, 2022 8:17 am
Reputation: 0
Status: Offline

Re: (9838) Password Management, Lifetime, Expiration?

Post by Wizard » Mon Sep 13, 2004 9:26 am

Users that have had access expire have probably reached the username's
expiration date -- OpenVMS provides one last password-change attempt
when the password lifetime is reached, but does not permit any access
after the username's expiration date is reached.

If you wish to know exactly what has transpired, use AUTHORIZE to
check the SYSUAF password lifetime, the SYSUAF username expiration,
and SYSUAF password-locked flag setting (/FLAG=LOCKPWD), and (after
enabling auditing and the password- and SYSUAF-related auditing, if
required) review the contents of the security audit logs.

The OpenVMS Wizard would also recommend a review of the security
manual and the AUTHORIZE utility chapter in the system manager's
utility reference manual, if you are unfamiliar with either of
these two documents. These documents provide extensive details
on configuring and managing user accounts (usernames) on OpenVMS.
It also provides details of areas that can be of concern when
establishing and managing user accounts, such as some of the
hazards of shared-access usernames, as well as accountability
and auditing recommendations.

Locked