Setting pw-expiration-warning-window = -1, as described in the vas.conf man page, does not disable the warning that users see when their password is expiring soon.
There is a documentation error in some versions of QAS. The setting to globally disable the password expiration warning is 0 not -1.
To disable the password expiration warning, run the following command as root and restart vasd
/opt/quest/bin/vastool configure vas pam_vas pw-expiration-warning-window 0
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center