Server wide password enforcement rules? 90 day force change.

Using Solaris 9 and 10.

What we want to do is set up global rules for our password files to restrict all users, not only new ones set up with the rules but also the ones that have been sitting on the system for years.

Is there a global way to force all users to change their password every 90 days instead of manually going into the shadow file and adding in the settings manually?

In "/etc/default/passwd" I believe you can setup ...

MAXWEEKS= MINWEEKS=12 PASSLENGTH=

... to change the default, then you just edit the password information for the existing users manually.

You might be able to edit a group as well ..

here is a good write up with a notifier as well.

open.itworld.com - Password Aging, Part 1