linux环境下设置用户密码过期期限

• 关于密码过期时间和用户过期时间的设置，通常使用chage命令和usermod命令。

• 设置某个用户的过期时间（accountexpires）可以用usermod -e来设置

• 查看某个用户的密码（passwordexpires）过期时间等信息，可以用：chage-l username

  如：chage-l lizi

  就会给出lizi这个用户的密码过期时间信息：

  Last password change					: Nov 26, 2014
  Password expires					: Feb 24, 2015
  Password inactive					: never
  Account expires						: never
  Minimum number of days between password change		: 1
  Maximum number of days between password change		: 90
  Number of days of warning before password expires	: 7

• 修改单个用户的密码过期时间，可以用chage-M days username来设置。

  如：chage-M 99999 lizi

  就是把lizi这个用户的最大期限设置为无限，lizi这个用户的密码就永远不会过期了。

• 关闭某个用户密码的ageing/expiring功能，可以将该用户的chage信息设置为如下内容：

  set Minimum Password Age to 0
  setMaximum Password Age to 99999
  set Password Inactive to -1
  setAccount Expiration Date to -1

  使用命令行来设置就是：chage-I -1 -m 0 -M 99999 -E -1 username

• 统一设置所有用户的密码过期时间，可以修改/etc/login.defs里面的PASS_MAX_DAYS

• chage的具体信息：

  Usage: chage [options] [LOGIN]
  
  Options:
    -d, --lastday LAST_DAY        set date of last password change to LAST_DAY
    -E, --expiredate EXPIRE_DATE  set account expiration date to EXPIRE_DATE
    -h, --help                    display this help message and exit
    -I, --inactive INACTIVE       set password inactive after expiration
                                  to INACTIVE
    -l, --list                    show account aging information
    -m, --mindays MIN_DAYS        set minimum number of days before password
                                  change to MIN_DAYS
    -M, --maxdays MAX_DAYS        set maximim number of days before password
                                  change to MAX_DAYS
    -W, --warndays WARN_DAYS      set expiration warning days to WARN_DAYS
  

  
  
  
  

• usermod 的具体信息

  Usage: usermod [options] LOGIN
  
  Options:
    -c, --comment COMMENT         new value of the GECOS field
    -d, --home HOME_DIR           new home directory for the user account
    -e, --expiredate EXPIRE_DATE  set account expiration date to EXPIRE_DATE
    -f, --inactive INACTIVE       set password inactive after expiration
                                  to INACTIVE
    -g, --gid GROUP               force use GROUP as new primary group
    -G, --groups GROUPS           new list of supplementary GROUPS
    -a, --append                  append the user to the supplemental GROUPS
                                  mentioned by the -G option without removing
                                  him/her from other groups
    -h, --help                    display this help message and exit
    -l, --login NEW_LOGIN         new value of the login name
    -L, --lock                    lock the user account
    -m, --move-home               move contents of the home directory to the
                                  new location (use only with -d)
    -o, --non-unique              allow using duplicate (non-unique) UID
    -p, --password PASSWORD       use encrypted password for the new password
    -s, --shell SHELL             new login shell for the user account
    -u, --uid UID                 new UID for the user account
    -U, --unlock                  unlock the user account
    -Z, --selinux-user            new SELinux user mapping for the user account