Automatically lockout an inactive account after "X" amount of days in AIX

Posted on 2009-12-16
Last Modified: 2013-11-17

We need to have AIX automatically lockout a user after, for example, 60 days of inactivity.  I didn't see anywhere in /etc/security/user where I could do this.  Any ideas?

Question by:cburn32
    LVL 68

    Accepted Solution

    Hi again,
    unfortunately there is no such mechanism in AIX, afaik.
    The best thing you could do is setting the password's maxage to 8 or 9 weeks and additionally set the maxexpired value to 0, which means that the password expires immediately when the maxage value is met.
    After this defined time, only an administrative user can change the password, which actually locks the account.

    Author Comment

    If I set maxexpired value to -1, will that allow the user to change their password?
    LVL 68

    Expert Comment

    Yes, maxexpired -1 essentially means 'unlimited'.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    Let's say you need to move the data of a file system from one partition to another. This generally involves dismounting the file system, backing it up to tapes, and restoring it to a new partition. You may also copy the file system from one place to…
    My previous tech tip, Installing the Solaris OS From the Flash Archive On a Tape (, discussed installing the Solaris Operating S…
    Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
    This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now