• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 814
  • Last Modified:

Looking for information on password policy management in Suse 9.3 (Yast specific)

Ok I apologize in advance for what is probably a simple question.

I am running Suse Linux 9.3 and am trying understand a specific behavior in regards to password policy management.

From a vanilla install of Suse 9.3 I opened Yast  and created a new user in the "edit and create users" tool. I noticed that there were no restrictions, warnings, or expirations applied to the account's password so I opened up the "Security Settings" configuration tool and setup some basic password policies (length, expiration, expiration warnings). Now for every new user I create, they seem to have these settings applied. However, making this configuration change did not apply to accounts created previously.

Why is this?

Are there any good documents that explain what is being modified (config files) by these tools in Yast? I did some searching but can not seem to find a good concise explanation.

Thanks in advance.
0
rpryomski
Asked:
rpryomski
1 Solution
 
chingmdCommented:
Not being familiar with yast specifically, I can at least answer why the previously created accounts do not take these changes.

It is likely calling the passwd command.   Adding the options needed to set the policy on the account being created.  These settings only effect the account being created.  Since other accounts may not want these changes.   It's better to not make a blanket change like this in case there are special sertvice accounts that you don't want to password change.

If you DO need/want to change existing accounts, you will want to use the following commandline:  chage

Look at the man page for it to see all the options.  

Here is a KB article too:
http://www.cyberciti.biz/tips/setting-off-password-aging-expiration.html
0
 
rpryomskiAuthor Commented:
Thanks this put me on the right track. Turns out there is a lot going on with YAST as it relates to user management...more than I had anticipated.

Thanks again.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now