天天一個Linux命令之：chage

命令簡介： 

　　該命令用於密碼時效管理。它能夠修改帳號和密碼的有效期。對於chage命令的描述以下所示：

　　The chage command changes the number of days between password changes and the date of the last password change. This information is used by the system to determine when a user must change his/her password

命令語法：

　　chage [options] user

命令參數：

參數	描敘
-d	指定密碼最後修改日期
-E	密碼到期的日期，過了這天，此帳號將不可用。0表示立刻過時，-1表示永不過時。
-h	顯示幫助信息並退出
-I	密碼過時後，鎖定帳號的天數
-l	列出用戶以及密碼的有效期
-m	密碼能夠更改的最小天數。爲零表明任什麼時候候均可以更改密碼。
-M	密碼保持有效的最大天數。
-W	密碼過時前，提早收到警告信息的天數。

使用示例： 

1: 查看chage命令的幫助信息

 

[root@DB-Server ~]#man chage
[root@DB-Server ~]# info chage

 

[root@DB-Server ~]# chage -h
Usage: chage [options] user
 
Options:
  -d, --lastday LAST_DAY        set last password change to LAST_DAY
  -E, --expiredate EXPIRE_DATE  set account expiration date to EXPIRE_DATE
  -h, --help                    display this help message and exit
  -I, --inactive INACTIVE       set password inactive after expiration
                                to INACTIVE
  -l, --list                    show account aging information
  -m, --mindays MIN_DAYS        set minimum number of days before password
                                change to MIN_DAYS
  -M, --maxdays MAX_DAYS        set maximim number of days before password
                                change to MAX_DAYS
  -W, --warndays WARN_DAYS      set expiration warning days to WARN_DAYS

2：查看mysql用戶以及密碼的有效期

[root@DB-Server ~]# chage -l mysql
Last password change                                    : Mar 26, 2015
Password expires                                        : never
Password inactive                                       : never
Account expires                                         : never
Minimum number of days between password change          : -1
Maximum number of days between password change          : -1
Number of days of warning before password expires       : -1

 

3：設置mysql用戶60天后密碼過時，至少7天后才能修改密碼，密碼過時前7天開始收到告警信息。

[root@DB-Server ~]# chage -M 60 -m 7 -W 7 mysql
You have new mail in /var/spool/mail/root
[root@DB-Server ~]# chage -l mysql
Last password change                                    : Mar 26, 2015
Password expires                                        : May 25, 2015
Password inactive                                       : never
Account expires                                         : never
Minimum number of days between password change          : 7
Maximum number of days between password change          : 60
Number of days of warning before password expires       : 7

4：強制新建用戶第一次登錄時修改密碼

[root@DB-Server home]# useradd test
[root@DB-Server home]# passwd test
Changing password for user test.
New UNIX password: 
Retype new UNIX password: 
passwd: all authentication tokens updated successfully.
[root@DB-Server home]# chage -d 0 test
You have new mail in /var/spool/mail/root
[root@DB-Server home]# chage -l test
Last password change                                    : password must be changed
Password expires                                        : never
Password inactive                                       : never
Account expires                                         : never
Minimum number of days between password change          : 0
Maximum number of days between password change          : 99999
Number of days of warning before password expires       : 7