From 9ade574afa759bd1e240dd9d12ba1e0713fc4a5b Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Fri, 1 Sep 2006 01:05:12 +0200 Subject: Use new routines localresetpasswd and localresetpasswdexpiry --- doc/admin.md | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) (limited to 'doc/admin.md') diff --git a/doc/admin.md b/doc/admin.md index 3229827..3c36ffa 100644 --- a/doc/admin.md +++ b/doc/admin.md @@ -68,22 +68,21 @@ FIXME: localmaildomainupdate should email diff file to postmaster@homebase.dk ## Extend password lifespan -When a user has changed password into something personal, the password lifespan is extended to 1 year: +If a user exceeds password lifespan, and still remembers the old password, the lifespan can be extended slightly to open a new window for changing it: - (user=; chage -M360 -W30 $user) + localresetpasswdexpiry - -TODO: The above command should ideally never ever be invoked manyally, but automatically through PAM +TODO: The above command should ideally emit an sms and/or email rewuesting the user to immediately change password ## Reset password 1. Reset the actual password using the following command: - (user=; gpw 10 11 && finger $user && passwd $user && chage -M30 -W14 $user) + localresetpasswd 2. Send a cellphone text message similar to the one for creating a new account. -TODO: Write a script to do the above + inject a self-chosen password + warn before resetting + spit out sms +TODO: The above command should ideally emit an sms and/or email rewuesting the user to immediately change password ## Warn about password expiry -- cgit v1.2.3