</term>
<listitem>
<para>
- defines the number of days after the password exceeded its maximum
- age where the user is expected to replace this password. The value
- is stored in the shadow password file. An input of 0 will disable an
- expired password with no delay. An input of -1 will blank the
- respective field in the shadow password file. See <citerefentry>
+ Defines the number of days after a password exceeds its maximum age
+ before the user account gets locked.
+ If the user does not change their password within this period of time,
+ their account gets disabled.
+ This value is stored in the shadow password file.
+ For more information, see <citerefentry>
<refentrytitle>shadow</refentrytitle><manvolnum>5</manvolnum>
- </citerefentry>for more information.
+ </citerefentry>.
</para>
<para>
- If not specified, <command>useradd</command> will use the
- default inactivity period specified by the
- <option>INACTIVE</option> variable in
- <filename>/etc/default/useradd</filename>, or -1 by default.
+ A value of 0 disables the account when the password expires, with no delay.
+ </para>
+ <para>
+ A value of -1 empties the respective field in the shadow password file,
+ which means that the inactivity period is not enforced.
+ </para>
+ <para>
+ If not specified,
+ <command>useradd</command> uses the default inactivity
+ period specified by the <option>INACTIVE</option> variable in
+ <filename>/etc/default/useradd</filename>,
+ or -1 by default if no value is specified.
</para>
</listitem>
</varlistentry>
</term>
<listitem>
<para>
- defines the number of days after the password exceeded its maximum
- age where the user is expected to replace this password. See <citerefentry>
- <refentrytitle>shadow</refentrytitle><manvolnum>5</manvolnum>
- </citerefentry>for more information.
+ specifies the number of days after a password expires
+ during which the user can still log in.
+ After this period, the account is locked.
</para>
<para>
This option sets the <option>INACTIVE</option> variable in