[vchkpw] Password Aging

2002-11-01 Thread Joe Oaks
Is there a way to implement password aging?
Our users need to change there passwords at least twice a year.

Currently we use password aging on the /etc/passwd file but are
going to migrate to the vpasswd and need this same functionality.

Thanks in advance.

Joe




RE: [vchkpw] Password Aging

2002-11-01 Thread Michael Bowe
If you use the vpopmail with the mysql backend, then you could add an additional 
column to the table so that each user has a field
that stores the date their password was last changed

Then you could crontab a daily script that scans the SQL looking for users with old 
passwords

Perhaps email them a warning at 5 months, and then lock them out at 6 months.
The lockout could be achieved by setting the NO_POP, NO_WEBMAIL etc flags on their 
account
That way their mailbox will still receive mail, but they just wont be able to pick it 
up

I have some basic info showing how you can setup vpopmail w/mysql backend at
http://www.pipeline.com.au/staff/mbowe/isp/vpopmail-mysql.htm

Michael.


 -Original Message-
 From: Joe Oaks [mailto:trell;trells.com]
 Sent: Saturday, 2 November 2002 9:49 AM
 To: Vchkpw
 Subject: [vchkpw] Password Aging


 Is there a way to implement password aging?
 Our users need to change there passwords at least twice a year.

 Currently we use password aging on the /etc/passwd file but are
 going to migrate to the vpasswd and need this same functionality.

 Thanks in advance.

 Joe






RE: [vchkpw] Password Aging

2002-11-01 Thread Joe Oaks
MySQL is out of the question, unfortunately, as we don't have MySQL in our
environment and I can't get approval to install it either :(
Any other suggestion?

Joe

BTW, great doc, I can use this for personal use though or other places :)

-Original Message-
From: Michael Bowe [mailto:mbowe;pipeline.com.au]
Sent: Friday, November 01, 2002 3:33 PM
To: 'Vchkpw'
Subject: RE: [vchkpw] Password Aging


If you use the vpopmail with the mysql backend, then you could add an
additional column to the table so that each user has a field
that stores the date their password was last changed

Then you could crontab a daily script that scans the SQL looking for users
with old passwords

Perhaps email them a warning at 5 months, and then lock them out at 6
months.
The lockout could be achieved by setting the NO_POP, NO_WEBMAIL etc flags on
their account
That way their mailbox will still receive mail, but they just wont be able
to pick it up

I have some basic info showing how you can setup vpopmail w/mysql backend at
http://www.pipeline.com.au/staff/mbowe/isp/vpopmail-mysql.htm

Michael.


 -Original Message-
 From: Joe Oaks [mailto:trell;trells.com]
 Sent: Saturday, 2 November 2002 9:49 AM
 To: Vchkpw
 Subject: [vchkpw] Password Aging


 Is there a way to implement password aging?
 Our users need to change there passwords at least twice a year.

 Currently we use password aging on the /etc/passwd file but are
 going to migrate to the vpasswd and need this same functionality.

 Thanks in advance.

 Joe