Furthermore, the only way to unlock an account with an infinite lockout time is for an administrator to issue the kas unlock command. Options -name Names the Authentication Database account for which to change settings. Sets one or more of four toggling flags. Either specify one or more of the following strings, or specify a hexidecimal number that appropriately combines the indicated values. Determines when the entry itself expires, which renders a user unable to log in and makes a server unreachable.
Date format is the same as for a date alone.
Surround the entire instance with quotes because it contains a space. If the account belongs to a user, this value is the maximum lifetime of a token issued to the user. If the account corresponds to a server such as afs , this value is the maximum lifetime of a ticket that the TGS issues to clients for presentation to the server during mutual authentication. Sets the number of days after the user's password was last changed that it remains valid. Note that the clock starts at the time the password was last changed, not when the kas setfields command is issued.