On 7/26/22 15:52, Tim via users wrote:
On Mon, 2022-07-25 at 18:50 -0700, Samuel Sieb wrote:
> there's no point in expiring the password to an account
> you're using yourself...
I see no point in ever expiring any password, unless you're auto-
locking out sacked employees because you're too incompetent to do the
job properly when they get sacked.
That situation doesn't make any sense. If it's expired, they can still
log in, they just have to change the password first.
You're referring to delayed expiring. The other use case is immediate
expiring, which is the case being described here. That's when the admin
sets an initial password and tells the user what it is. Then the user
has to change the password when they login. Now the admin doesn't know
the user's password any more. But again, this doesn't make sense when
it's your own password that you're setting.