Did you try /etc/login.defs