Description

This article describes how to check the expiration period of a user's password with below configuration:


set system login password minimum-reuse 3
set system login password maximum-lifetime 180
set system login password minimum-length 8
set system login password minimum-upper-cases 1
set system login password minimum-lower-cases 1

Solution

There are no new show commands to check user password expiry time.

 

However, the system will prompt us once the password is expired or is about to expire.

 

  • When a user logs in with an expired password, below warning message will be displayed after the login is successful. ​

“Password for ‘<user>’ expired, change the password immediately”

 ​

  • When a user commits the configuration with an expired password, below error message will be displayed at the time of commit​.

“Password for ‘<user>’ expired, change the password to commit the configuration”

 ​

  • When a user tries to change password even before the age of the password has reached the minimum lifetime value configured, below error message will be displayed​

“Password for ‘<user>’ cannot be changed until the age of the password exceeds minimum lifetime" 

 

  • When the password for a user is going to expire in less than 8 days, below warning message will be displayed when the user logs in or commits the configuration ​

“Password for ‘<user>’ will expire in n day(s)”, where n is the number of days left for the password to expire.



 

Modification History

2024-04-19 : Article Created
2026-02-25 : Category Updated