From c782ba09977da3d41b8fc1dcd62ccdca49306fbd Mon Sep 17 00:00:00 2001 From: Robert Krátký Date: Aug 29 2017 23:23:17 +0000 Subject: Re-adding pass. policy fixes. --- diff --git a/en-US/sysadmin_user_stories/assembly-configuring_password_policies_for_users.adoc b/en-US/sysadmin_user_stories/assembly-configuring_password_policies_for_users.adoc index 2c54d8d..a846669 100644 --- a/en-US/sysadmin_user_stories/assembly-configuring_password_policies_for_users.adoc +++ b/en-US/sysadmin_user_stories/assembly-configuring_password_policies_for_users.adoc @@ -5,22 +5,15 @@ This section describes how to configure a password policy for a user. .Prerequisites -* Sentence or a bulleted list of pre-requisites that must be in place or done before the user starts this task. +* User account created. -* Delete section title and bullets if the task has no required pre-requisites. - -* Text can be a link to a pre-requisite task that the user must do before starting this task. - -include::procedure-setting_password.adoc[leveloffset=+1] +include::procedure-setting_passwords.adoc[leveloffset=+1] include::procedure-enabling_password_aging.adoc[leveloffset=+1] -include::reference-chage_command_line_options.adoc[leveloffset=+1] +include::reference-chage_command-line_options.adoc[leveloffset=+1] == Additional Resources -* Bulleted list of links to concepts, reference, or other tasks closely related to this user story. - -* Include only the most relevant items as links, not every possible related item. +* `passwd(1)` and `chage(1)` manual pages -* Delete section title and bullets if no related information is needed. diff --git a/en-US/sysadmin_user_stories/procedure-enabling_password_aging.adoc b/en-US/sysadmin_user_stories/procedure-enabling_password_aging.adoc index 1a68974..cebce93 100644 --- a/en-US/sysadmin_user_stories/procedure-enabling_password_aging.adoc +++ b/en-US/sysadmin_user_stories/procedure-enabling_password_aging.adoc @@ -1,21 +1,17 @@ -// Include an 'ID' that corresponds to the title of the assembly -// The ID will be used as an anchor for linking to the title -// Do not change the ID to make sure existing links keep working [#enabling_password_aging] = Enabling Password Aging -For security reasons, it is advisable to require users to change their passwords periodically. This can be done by using the [command]#chage# command. +For security reasons, it is advisable to require users to change their passwords periodically. This can be done using the [command]`chage` command. .Prerequisites -* Shadow passwords must be enabled to use the [command]#chage# command. For more information, see xref:Managing_Users_and_Groups.adoc#s2-users-groups-shadow-utilities[Shadow Passwords]. +* Shadow passwords must be enabled to use the [command]`chage` command. For more information, see link:https://bex.fedorapeople.org/workshop_test_site/rawhide/system-administrators-guide/basic-system-configuration/Managing_Users_and_Groups.html#s2-users-groups-shadow-utilities[Shadow Passwords]. .Procedure . To configure password expiration for a user from a shell prompt, run the following command as `root`: - -[subs="quotes, macros"] ++ +[subs="+quotes"] ---- # chage _options_ _username_ - ---- diff --git a/en-US/sysadmin_user_stories/procedure-setting_password.adoc b/en-US/sysadmin_user_stories/procedure-setting_password.adoc deleted file mode 100644 index e5307f8..0000000 --- a/en-US/sysadmin_user_stories/procedure-setting_password.adoc +++ /dev/null @@ -1,14 +0,0 @@ -// Include an 'ID' that corresponds to the title of the assembly -// The ID will be used as an anchor for linking to the title -// Do not change the ID to make sure existing links keep working -[#setting_password] -= Setting Password - -For security reasons, it is advisable to require users to change their passwords periodically. - -.Procedure - -. To set a password of a user, use the following command as `root`: ----- -# passwd _username_ ----- diff --git a/en-US/sysadmin_user_stories/procedure-setting_passwords.adoc b/en-US/sysadmin_user_stories/procedure-setting_passwords.adoc new file mode 100644 index 0000000..c0115a2 --- /dev/null +++ b/en-US/sysadmin_user_stories/procedure-setting_passwords.adoc @@ -0,0 +1,13 @@ +[#setting_passwords] += Setting Passwords + +For security reasons, it is advisable to require users to change their passwords periodically. + +.Procedure + +. To set a password of a user, use the following command as `root`: ++ +[subs="+quotes"] +---- +# passwd _username_ +---- diff --git a/en-US/sysadmin_user_stories/reference-chage_command-line_options.adoc b/en-US/sysadmin_user_stories/reference-chage_command-line_options.adoc new file mode 100644 index 0000000..6dd564b --- /dev/null +++ b/en-US/sysadmin_user_stories/reference-chage_command-line_options.adoc @@ -0,0 +1,20 @@ +[#chage_command-line_options] += chage Command-line Options + +When the [command]`chage` command is followed directly by a username (that is, when no command-line options are specified), it displays the specified user's current password-aging values and allows you to change these values interactively. + +[#table-chage-options] +.chage command line options +[options="header",cols="1,8"] +|=== +|Option|Description +|[option]`-d`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specifies the number of days since January 1, 1970 the password was changed. +|[option]`-E`pass:attributes[{blank}] pass:attributes[{blank}]_date_|Specifies the date on which the account is locked, in the format YYYY-MM-DD. Instead of the date, the number of days since January 1, 1970 can also be used. +|[option]`-I`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specifies the number of inactive days after the password expiration before locking the account. If the value is `0`, the account is not locked after the password expires. +|[option]`-l`|Lists current account aging settings. +|[option]`-m`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specify the minimum number of days after which the user must change passwords. If the value is `0`, the password does not expire. +|[option]`-M`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specify the maximum number of days for which the password is valid. When the number of days specified by this option plus the number of days specified with the [option]`-d` option is less than the current day, the user must change passwords before using the account. +|[option]`-W`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specifies the number of days before the password expiration date to warn the user. +|=== + +You can configure a password to expire the first time a user logs in. This forces users to change passwords immediately. diff --git a/en-US/sysadmin_user_stories/reference-chage_command_line_options.adoc b/en-US/sysadmin_user_stories/reference-chage_command_line_options.adoc deleted file mode 100644 index f55aa52..0000000 --- a/en-US/sysadmin_user_stories/reference-chage_command_line_options.adoc +++ /dev/null @@ -1,24 +0,0 @@ -// Include an 'ID' that corresponds to the title of the assembly -// The ID will be used as an anchor for linking to the title -// Do not change the ID to make sure existing links keep working -[#reference_chage_command_line_options] -= Reference chage Command-line Options - -* When the [command]#chage# command is followed directly by a username (that is, when no command line options are specified), it displays the specified users current password aging values and allows you to change these values interactively. - -[[table-chage-options]] -.chage command line options - -[options="header"] -|=== -|Option|Description -|[option]`-d`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specifies the number of days since January 1, 1970 the password was changed. -|[option]`-E`pass:attributes[{blank}] pass:attributes[{blank}]_date_|Specifies the date on which the account is locked, in the format YYYY-MM-DD. Instead of the date, the number of days since January 1, 1970 can also be used. -|[option]`-I`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specifies the number of inactive days after the password expiration before locking the account. If the value is `0`, the account is not locked after the password expires. -|[option]`-l`|Lists current account aging settings. -|[option]`-m`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specify the minimum number of days after which the user must change passwords. If the value is `0`, the password does not expire. -|[option]`-M`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specify the maximum number of days for which the password is valid. When the number of days specified by this option plus the number of days specified with the [option]`-d` option is less than the current day, the user must change passwords before using the account. -|[option]`-W`pass:attributes[{blank}] pass:attributes[{blank}]_days_|Specifies the number of days before the password expiration date to warn the user. -|=== - -You can configure a password to expire the first time a user logs in. This forces users to change passwords immediately.