How to disable DBC password expiration?

Question

How to disable DBC password expiration?

Answer :

To disable DBC password exipiration, need set ExpirePassword to 0 on DBC.SysSecDefaults table.

Special Considerations

You must restart the database for this change to take effect.

Additional Information :

Password Controls

Teradata Database offers several options for controlling password format and usage.
The DBC.SysSecDefaults table contains a set of global controls that restrict the usage
and content of passwords for all users. (e.g Field Name : ExpirePassword...)

ExpirePassword .

The ExpirePassword parameter specifies the number of days a password is valid.
Teradata Database automatically adds this value to the password change date value
maintained in the database row for each created user. Then it compares the result
to the current date to determine if the password is still valid.

1) Default Setting :

The default setting for the ExpirePassword parameter is 0, that is, password do not expire.

2) Allowable Values :

The range of allowable values (in days) for ExpirePassword is 0 through 32767.
If you enter a negative value, the system accepts the UPDATE, but the value
reverts to the default zero value at the next restart and writes an error message
to the event log :

3698: SysSecDefaults table has a negative value in an integer column.

Please see more details from TD14.0 Security Administration Manual B0351100111A

# Example to disable Expire password.

lnx2078:~ # bteq
Teradata BTEQ 15.10.00.01 for LINUX. PID: 23590
Copyright 19842015,
Teradata Corporation. ALL RIGHTS RESERVED.
Enter your logon or BTEQ command:
.set sidetitles on
.set sidetitles on

Teradata BTEQ 15.10.00.01 for LINUX. Enter your logon or BTEQ command:
.set foldline on
.set foldline on

Teradata BTEQ 15.10.00.01 for LINUX. Enter your logon or BTEQ command:
.logon dbc
.logon dbc
Password:

*** Logon successfully completed.
*** Teradata Database Release is 15.10.01.06
*** Teradata Database Version is 15.10.01.06
*** Transaction Semantics are BTET.
*** Session Character Set Name is 'ASCII'.
*** Total elapsed time was 1 second.

BTEQ Enter
your SQL request or BTEQ command:

sel * from dbc.syssecdefaults;
*** Query completed. One row found. 10 columns returned.
*** Total elapsed time was 1 second.

PrimeIndex 1
ExpirePassword 30 <<<< 30 days
PasswordMinChar 8
PasswordMaxChar 30
PasswordDigits R
PasswordSpecChar P
PasswordRestrictWords N
MaxLogonAttempts 3
LockedUserExpire 30
PasswordReuse 395

BTEQ Enter
your SQL request or BTEQ command:

UPDATE DBC.SysSecDefaults SET Expirepassword = 0 WHERE PrimeIndex=1;
*** Update completed. One row changed.
*** Total elapsed time was 1 second.

BTEQ Enter
your SQL request or BTEQ command:

sel * from dbc.syssecdefaults;
*** Query completed. One row found. 10 columns returned.
*** Total elapsed time was 1 second.
PrimeIndex 1
ExpirePassword 0 <<<<
PasswordMinChar 8
PasswordMaxChar 30
PasswordDigits R
PasswordSpecChar P
PasswordRestrictWords N
MaxLogonAttempts 3
LockedUserExpire 30
PasswordReuse 395