Use the AUTOEXP record to control the automatic expiration of logon passwords. It is valid only if you are using the CA VM:Secure Rules Facility.
AUTOEXP warning expiration
AUTOEXP is defined in the SECURITY CONFIG file.
Specifies the number of days after a user’s last logon password change when that user begins to receive the following message at logon time:
YOUR LOGON PASSWORD WILL EXPIRE IN nn DAYS
Users will see this message each time they log on until they change their password or it expires.
The warning value must be less than or equal to the expiration value. If warning and expiration are the same positive number, a logon password is expired without warning when the expiration interval is reached. The minimum is 0; the maximum is 32767.
Specifies the number of days after the last logon password change when that password automatically expires. The first time a user logs on after this limit has been reached, the following message is displayed:
YOUR LOGON PASSWORD HAS EXPIRED
Users are forced to change their passwords.
A value of 0 for expiration suppresses automatic expiration, and is equivalent to omitting the AUTOEXP record entirely. The minimum for expiration is 0; the maximum is 32767.
Automatic expiration means that when a user’s password expires, CA VM:Secure automatically prompts the user to enter a new password before being allowed to log on.
Only those users that have a *PW= special comment in their directory entry will be enabled for automatic password expiration. To enable automatic password expiration, include a *PW= comment in either a skeleton file or in each user directory entry.
Example
To force all users at your site to change their passwords every 30 days and give them a warning to do so beginning five days before automatic expiration, add the following AUTOEXP record to the SECURITY CONFIG file. (This assumes that all users have a *PW= comment in their directory entry)
AUTOEXP 25 30
Note: For more information about using the *PW= special comment, see *PW= (Password History) in the chapter "Special Comment Reference" of the Administration Guide.
|
Copyright © 2014 CA.
All rights reserved.
|
|