Re: Bug#664596: User seems to missing ability to login via ssh/console after some days

[Petter Reinholdtsen <pere@hungry.com>]

[Wolfgang Schweer]
> Yes, in other words the default value seems to be 0.
> 
> So one could set it back to the default by executing
> 
> kadmin.local -q "modpol -maxlife 0secs users"
> 
> New user accounts should then have: Password expiration date: [none]

It even affected old users:

root@tjener:~# kadmin.local -q "modpol -maxlife 0secs users"
Authenticating as principal root/admin@INTERN with password.
root@tjener:~# echo getprinc pere |kadmin.local |grep -i passw
Authenticating as principal root/admin@INTERN with password.
Last password change: Sat Feb 04 13:41:41 CET 2012
Password expiration date: [none]
Failed password attempts: 0
root@tjener:~# 

Great!  Who documents how to fix an existing installation and provide
a script to fix it in debian-edu-config?  We should also fix it for
new installations.  I lack a test bench at the moment and can not test
a fix myself.

Btw, does this mean the first user is not using the users policy?  I
guess it should be identical to other users in this regard.
-- 
Happy hacking
Petter Reinholdtsen