I want to implement enforcing regular password changes (say once a month) and not accepting new passwords if the same password is already used within a certain period (say in last year). I am using the built in authentication and did not see any facility to accomodate such a need. What is the best way to implement such a scenario?
I believe I can check the last password change propery during the login and prompt a password change if the change date is due soon or disable the login if the change date is already passed but when it comes to checking the previous passwords, I am not sure how to tackle that one in best way.
...
Go to the complete details ...