IT Mutt

March 22, 2006

[TAM] How do I setup a user’s account to be non-expiring?

Filed under: Tivoli Access Manager for e-business — Jose Negron @ 7:21 am

At the pdadmin command prompt type the following:

pdadmin sec_master> policy set account-expiry-date unlimited -user <USER_NAME>
pdadmin sec_master> policy set max-password-age 0-0:0:0 -user <USER_NAME>

So for example (now ignore the fact that I'm doing with a user who's username is jsmith):

pdadmin sec_master> policy set account-expiry-date unlimited -user jsmith
pdadmin sec_master> policy set max-password-age 0-0:0:0 -user jsmith

To confirm, at the pdadmin command prompt:

pdadmin sec_master> policy get account-expiry-date -user jsmith
Account expiry date: unlimited
pdadmin sec_master> policy get max-password-age -user jsmith

Maximum password age: 0-0:0:0

That should do it.

Don't forget the '-user <USER_NAME>' because otherwise all users will be set with non-expiring passwords and auditing will tell you that you suck.

re: TAM 5.1

4 Comments »

  1. Hi, just in case you set to unlimited and then account-expiry-date still shows a specific date, You must 1° unset, as follow: policy get account-expiry-date -user xxxxxxx 2° policy set account-expiry-date unlimited -user xxxxxxxxx 3° policy get account-expiry-date -user xxxxxxxxxxx
    Account expiry date: unlimited

    I hope this helps you !

    Comment by Jose Antonio — August 24, 2013 @ 5:05 am

    • I need to correct the Steps:
      1.- policy set account-expiry-date unset -user xxxxxxxx
      2.- policy set account-expiry-date unlimited -user xxxxxxx
      3.- policy get account-expiry-date -user xxxxxx (It MUST show: Account expiry date: unlimited)

      I hope this helps !!!

      Comment by Jose Antonio Roa — August 24, 2013 @ 5:37 am

  2. Hello Google performs great but your site is starting steadily which actually went
    on about one minute to load up, I am not sure whether it’s my personal problem or your
    web site problems. However , thanks for submitting
    fantastic article. Everyone who stumbled
    on this great site must have discovered this short
    article totally beneficial. I have to mention that you have done amazing job with this plus hope to find even more brilliant things through you.
    After checking out your blog post, I’ve book-marked your site.

    Comment by dota2hack.org — May 16, 2015 @ 6:09 pm

  3. Hi there other websites works fine yet your website
    is loading steadily which actually went on close to one minute to finally load up,
    I’m not sure whether it is my own issue or maybe your site problems.
    Nevertheless, I want to thank you so much for adding wonderful content.
    Most people who discovered this web site must have noticed this informative article literally beneficial.
    This is brilliant what you actually have implemented
    and want to discover more content from you. Right after viewing the articles, I’ve book marked your web blog.

    Comment by free-fifa15coins.com — June 21, 2015 @ 3:49 am


RSS feed for comments on this post. TrackBack URI

Leave a reply to dota2hack.org Cancel reply

Create a free website or blog at WordPress.com.