Reference Guide › Utilities › segrace Utility—Display User Login Information › segracex Utility—Check Password Expiry on UNIX

segracex Utility—Check Password Expiry on UNIX

Valid on UNIX

The segracex utility sets a new password in the X‑Windows environment. The segracex utility checks whether the user's password has expired. If it has, segracex displays a window in which the user can replace the password.

The segracex utility is designed to be linked to the user initialization scripts that are invoked after the user logs into the desktop environment.

The utility checks CA ControlMinder grace login attribute of the user. If the number of remaining grace logins for the user is:

• Zero, segracex forces the user to change the password.
• Positive but less than the value specified in the grace parameter of the user or the global grace setting (if there is one), segracex advises the user to change the password.
• Equal to or greater than the value specified in the grace parameter of the user or the global grace setting (if there is one), segracex does nothing.

When changing the password, segracex prompts the user for the old password. It then prompts the user for the new password.

• If CA ControlMinder password checking is enabled, segracex checks whether the new password complies with the password rules that are set in the database. If the new password passes the quality check, the user is again prompted for the new password.
• If password checking is disabled, the user is immediately re‑prompted for the new password.

  When the new password is entered for the second time, the two copies of the new password are compared. If the copies are not identical, the user is prompted again for the new password.

If the two new passwords are identical, the password is updated in the following ways:

• The local host password files-/etc/passwd and any security files-and the local database are updated.
• If a value is defined in the passwd_pmd or parent_pmd token in the [seos] section of the seos.ini file, the appropriate PMDB is updated, which then propagates the update to its subscribers both in the UNIX environment and the database. If the token nis_env in the [passwd] section of the seos.ini file has a value (either nis or nisplus), the NIS or NIS+ server is updated. When a password is set on a master NIS server, the NIS password map is automatically reconstructed.

The customizable resources, such as colors and fonts, are in the segracex file. During standard installation of CA ControlMinder, this file is placed in the following directories:

• For all platforms except Sun Solaris:

  /usr/lib/X11/app‑defaults
  

• For the Sun Solaris platforms:

  /usr/lib/openwin/app‑defaults
  

The icon with the CA ControlMinder trademark is in the BigTradeMark_BW.xpm file, which you must put into the ACInstallDir/data/segracex directory after installation.

This command has the following format:

segracex [‑user userName]

userName

If you specify a user name, and the requester has the ADMIN attribute, segracex operates on the specified user.

If you do not specify a user name, segracex operates on the current user.