{{# The regular expression filters away accounts with no passwords and locked passwords (passwords are located in the 2nd field of /etc/shadow entries). #}} {{{ test_etc_shadow_password_variable( regex="^(?:[^:]*:)(?:[^\!\*:]*:)(?:[^:]*:){3}(\d+):(?:[^:]*:){2}(?:[^:]*)$", external_variable_id="var_accounts_password_warn_age_login_defs", operation="greater than or equal", description="Set Existing Passwords Warning Age") }}}