Password Ageing

From: Baker, Darryl (Darryl.Baker_at_gedas.com)
Date: 08/23/05

  • Next message: Travis Johnson: "Re: Redhat WS 4, AIX 5.2.0.4, X11 apps problem" 
    To: "'secureshell@securityfocus.com'" <secureshell@securityfocus.com>
Date: Tue, 23 Aug 2005 12:45:46 -0400

    Our corporate security policy requires us to turn on password ageing. I'm
    trying to figure out what the effects are to openssh users. This is on
    Solaris 8 & 9 with openssh 3.9p1.

    I have several questions:
            1) Will ssh users ever see the warnings about their password
    approaching expiration?
            2) If the password has expired will they still be able to log in:
                    a) using a password?
                    b) using a key?
            3) Would UseLogin improve any of this?
            4) What happens with key only logins with UseLogin turned on?

    _____________________________________________________________________
    Darryl Baker
    Senior Unix Specialist
    gedas USA, Inc.
    Operational Services Business Unit
    3800 Hamlin Road
    Auburn Hills, MI 48326
    US
    phone +1-248-754-5341
    fax +1-248-754-6399
    Darryl.Baker@gedas.com
    http://www.gedasusa.com
    _____________________________________________________________________

  • Next message: Travis Johnson: "Re: Redhat WS 4, AIX 5.2.0.4, X11 apps problem"