Is there a way to force users to renew their password or enforce password
rules using the native j_security_check authentication mechanisms of tomcat?

Ferindo