passwords expiring

There should be an entry in T_DEFAULTS with a value of PW_EXPR_DAYS.  This determines how often the user needs to change their password.  

I'm not sure if you can eliminate this entry, but you could set it to a rather large value if nothing else.

I wonder if there is anything within SQL that can be changed as well?

Is what you want to do push out the expiration date for a specific user? (as opposed to overall just changing the duration before one is prompted) You could update the current expiration date in t_metuser.

That said, I may be remembering incorrectly but I thought there was a PCI requirement about the frequency of password resets, so you may want to check on that before making any major change to your current expiration setup.

Is what you want to do push out the expiration date for a specific user? (as opposed to overall just changing the duration before one is prompted) You could update the current expiration date in t_metuser.

That said, I may be remembering incorrectly but I thought there was a PCI requirement about the frequency of password resets, so you may want to check on that before making any major change to your current expiration setup.

The Security Administration document has the timing guidelines for PCI compliance outlined in section 2.F.  It has the values required for application timeout and password policies in it, including the values which need to be entered in T_DEFAULTS.