add more functionality

[lisps]

• add old passwords to policy check
• add password expire time
• force user to change password
• warn user to change password
• add start_date to have a transition time before first password change

i think its not yet ready for merging, more for a discussion base

[splitbrain]

I wouldn't use JSON here. Just a simple text file with one hash per line.

[splitbrain]

I added a few comments.

In general I'm not a friend of expiring passwords as this usually does not increase but instead decreases security (Users rely on simple incrementation schemes or publically written down passwords), however I think it makes sense to have this in this plugin as it is a common requirement.

[lisps]

can you check my last commit again? thanks

[splitbrain]

dates should be formatted with dformat()

[lisps]

can you merge this or say what to do to get it merged?

[splitbrain]

I'm still no fan of the date_start parameter. I think it's unnecessary. Instead you should simply create an (empty) passhistory file for the user you're checking. Then compare with the filemtime of that file. This way each user will have to change the password expire days after the first login after the plugin has been installed.

[Luiggy]

would it be updated for the password policy expiration?