Cisco Headend System Release 2.7 Installation Guide

 

78-4036705-01 Rev D 

149 

 

By default, the system requires that all user accounts change their passwords after 13 
weeks. The system also displays a warning 2 weeks before the deadline. After that 
time, if the user has not changed their account password, the user account is locked. 

Important: This expiration period is applicable to all users, including root, 
dtacsSSH, informix, dtacsftp, easftp, any custom accounts, and the dtacs role. 

 

Default number of weeks a password is valid: 13 

 

Default time period from password expiration the user receives a warning 
message to change passwords: 2 

 

Recovery: Administrator must reset the user account by changing the password 

You can change or disable the password expiration period applied when adding 
new users or changing passwords, and change or disable an individual user's 
password expiration period. 

 

You can change the password expiration period applied when creating new users or 
changing passwords.  

Important: 

 

New users added to the server after the password expiration period has changed 
automatically inherit the new password expiration period. 

 

Existing users' individual expiration periods remain in force until the user's 
password is changed (either by an administrator or by the user). 

 

Unless the system password expiration period is disabled, all user accounts will 
inherit the system password expiration period each time they change their 
passwords, even if the user's expiration period has been disabled. 

 

If you set the value of MAXWEEKS to -1, you disable password expiration. 

 

Use this procedure to change the password expiration period for the entire system. 
1  Open an xterm window on the DTACS Server. 
2  Log into the DTACS Server as root. 
3  Type cd /etc/default and press Enter. 
4  Open the passwd file in a UNIX text editor.