If you use the vpopmail with the mysql backend, then you could add an additional 
column to the table so that each user has a field
that stores the date their password was last changed

Then you could crontab a daily script that scans the SQL looking for users with old 
passwords

Perhaps email them a warning at 5 months, and then lock them out at 6 months.
The lockout could be achieved by setting the NO_POP, NO_WEBMAIL etc flags on their 
account
That way their mailbox will still receive mail, but they just wont be able to pick it 
up

I have some basic info showing how you can setup vpopmail w/mysql backend at
http://www.pipeline.com.au/staff/mbowe/isp/vpopmail-mysql.htm

Michael.


> -----Original Message-----
> From: Joe Oaks [mailto:trell@;trells.com]
> Sent: Saturday, 2 November 2002 9:49 AM
> To: Vchkpw
> Subject: [vchkpw] Password Aging
>
>
> Is there a way to implement password aging?
> Our users need to change there passwords at least twice a year.
>
> Currently we use password aging on the /etc/passwd file but are
> going to migrate to the vpasswd and need this same functionality.
>
> Thanks in advance.
>
> Joe
>


Reply via email to