Need help with password aging

[Andrew Koenig]

In article <179 at camdev.UUCP>, sscott at camdev.UUCP (Steve Scott) writes:

> As a major security overhaul within my company, the issue of password aging
> has raised its head.  So, I am in need of advice on how to implement such.

It is far from clear to me that password aging accomplishes much.
Its usual effect is to cause people to toggle between two similar
passwords.  I don't believe for an instant that such toggling
will make passwords any harder to guess, break, or acquire.

On the other hand, it would be a real good idea to lock out any
logins that aren't used in some sensible time period, like a month.
-- 
				--Andrew Koenig
				  ark at europa.att.com