Directory Manager Guide › Managing Directory Entries › Expiring Passwords

Expiring Passwords

Logon passwords can be automatically expired if your CA VM:Director system administrator has made provisions for managing inactive user IDs this way. If you manage a user ID that you do not want automatically expired, ask your CA VM:Director system administrator to remove the password history special comment (*PW=) from that user directory entry.

A user ID with an expired password cannot be logged on until the owner of that user ID changes the password to a valid one.

Use the EXPIRE command to expire the logon password of a user ID. For example, to expire the password of user ID FRASIERC, enter the following:

vmdirect expire frasierc

It is easy to spot the user IDs with expired logon passwords because the ULIST command displays their password status as Exprd.

Note: For more information, see Viewing Information About User IDs That You Manage.

You can also get specific information about user ID password expiration dates using the GETPWEXP command.

Note: For more information, see Checking Password Expirations for User IDs You Manage.

For more information about and requirements for using the EXPIRE command, see the Reference Guide.