Password Exiration Check is Broke on Trusted HP-UX 10.20 when Password Aging is Disabled

From: Brian Jester - Maxim Systems Inc. (bjester_at_maximsys.com)
Date: 03/18/04

  • Next message: Darren Tucker: "Re: [OpenSSH] public key problem" 
    To: <secureshell@securityfocus.com>
Date: Wed, 17 Mar 2004 16:02:28 -0800

    Password exiration check in "session.c" is broke on Trusted HP-UX 10.20 when
    password aging is disabled.

    Here's my configuration:

    1. Trusted HP-UX 10.20
    2. Password Aging is Disabled'
    3. Bundle all pertinent files into a tarball add to a DII-COE (Defense
    Infrastructure Information/Common Operating Environment) Segment
    4. Segment installed on DII-COE Trusted HP-UX 10.20 platform with password
    aging disabled

    Here's the problem I observed:

    -- Open SSH forced me to change my password at the first login as any user.

    My solution:

    --I edited the the "session.c" source file by commenting out the sections
    with "do_pwchange" when an "expired" password is found.
    --recompiled and ran like a champ.

    Anyone else have a similar situation?

    R/

    Brian Jester
    Maxim Systems
    SPAWAR SC SD
    619-553-5321

  • Next message: Darren Tucker: "Re: [OpenSSH] public key problem"