{{# The regular expression filters away accounts with no passwords and locked passwords (passwords are located in the 2nd field of /etc/shadow entries). #}}
{{{ test_etc_shadow_password_variable(
    regex="^(?:[^:]*:)(?:[^\!\*:]*:)(?:[^:]*:){4}(\d+):(?:[^:]*:)(?:[^:]*)$",
    external_variable_id="var_account_disable_post_pw_expiration",
    operation="less than or equal",
    description="Set existing passwords a period of inactivity before they been locked", rule_id=rule_id, rule_title=rule_title) }}}
