[X4U] Password Expiration?

[Rod Buchanan]

On 4/21/05 4:43 PM, "John Baltutis" <baltwo at san.rr.com> wrote:

> On 04/21/05, Peter Krug <pkrug at mac.com> wrote:
>> 
>> Alright folks,  this is a biggie and I need your help.  I work in a
>> diagnostic/research lab and we all use macs for day-to-day operations.
>> However, the university that we work at has been doing a HIPPA/IT audit
>> and said that any computer with patient information must have its
>> password expire every 120 days.
>> 
> What's your LAN configuration? Which computers and OS Xs? Is there a server
> involved? According to <http://diveintoosx.org/faq/>, Mac OS X Server
> doesn't support password expiration. Not  according to
> <http://docs.info.apple.com/article.html?artnum=151419>: "Apple has built
> an open, extensible directory services architecture, called Open Directory,
> into MacOSX and MacOSX Server. ŠOpen Directory can also enforce such
> policies as password expiration and minimum length."

Open Directory on Mac OS X 10.3 Server (Panther) does support password
expiration:

"Using Server Admin, you can set up and manage password policies for your
entire network. For example, you can force users to change passwords at next
login, disable user accounts after a certain date, enforce minimum password
lengths and other criteria, and disable inactive accounts after a set period
of nonuse. User- or group-specific policies (set up in Workgroup Manager)
override the general policies set up in Server Admin."

-- 
Rod

Windows NT crashed.
      I am the Blue Screen of Death
No one hears your screams.

   -- Salon Haiku Contest, 1998