Date: Tue, 13 Nov 2018 09:15:01 -0500 From: Daniel Feenberg <feenberg@gmail.com> To: David Mehler <dave.mehler@gmail.com> Cc: freebsd-questions <freebsd-questions@freebsd.org> Subject: Re: disable password change prompt notifications Message-ID: <CAFOAwsqoAV_AGm-cOwCZ7hviyCLWgENb%2B9nmCk%2BzUEuMZ93Jmw@mail.gmail.com> In-Reply-To: <CAPORhP7s=vEFnmhYVZKqxU_=PBHPwWGiW%2B4ZJeu7UbZNYmqPjw@mail.gmail.com> References: <CAPORhP7s=vEFnmhYVZKqxU_=PBHPwWGiW%2B4ZJeu7UbZNYmqPjw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 11/13/18, David Mehler <dave.mehler@gmail.com> wrote: > Hello, > > Running Fbsd 11.x. I am getting warning your password will expire on x > day, and that day is 2 and a half weeks away. This happens both on > login and when I use the su command. I'd like to suppress these > password change warnings or at least make them only go off say 3 days > prior to a mandatory password chage. > _______________________________________________ Try "man passwd" and look for the "-w" option, but seriously we should be getting away from forced changes - they fill a much needed gap. Consider this recommendation: Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). from the NIST Guidlines: https://pages.nist.gov/800-63-3/sp800-63b.html#sec10 Daniel Feenberg NBER
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAFOAwsqoAV_AGm-cOwCZ7hviyCLWgENb%2B9nmCk%2BzUEuMZ93Jmw>