Re: Forcing new password at login (w/o requiring an old password) (sudo related)

From: Darren Tucker (dtucker_at_gate.dodgy.net.au)
Date: 09/03/05

  • Next message: Darren Tucker: "Re: problems regarding "This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin"" 
    Date: 03 Sep 2005 13:45:56 GMT

    On 2005-08-25, Andrew Gideon <c182driver@gideon.org> wrote:
    > Darren Tucker wrote:
    >> If you're using PAM then the user will be forced to set a new password
    >> when the existing one expires regardless of the authentication method.
    >
    > What I found in testing is that I could expire the password, which prevents
    > login (even via the key pair). But I never saw the message that should be
    > appearing when in the warning period.

    Password expiry has a surprising number of corner cases and I think that's
    a known one: http://bugzilla.mindrot.org/show_bug.cgi?id=1053 

    -- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
  • Next message: Darren Tucker: "Re: problems regarding "This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin""

    Relevant Pages

    • Re: configure password prompt in SSH
      ... > and keyboard-interactive authentications? ... PAM, which is why the two are often used together). ... Darren Tucker ... Good judgement comes with experience. ...
      (SSH)
    • Re: PAM changing user name
      ... The specific case matches the Radius example pretty well ... > authentication work with PAM backported - no problem upgrading to a more ... Darren Tucker ... Good judgement comes with experience. ...
      (comp.security.ssh)
    • Re: OpenSSH 3.8p1 on Solaris with PAM/krb5
      ... Will that still use password auth ... it will use whatever PAM is configured for. ... Darren Tucker ... Good judgement comes with experience. ...
      (SSH)
    • Re: OpenSSH 3.8p1 on Solaris with PAM/krb5
      ... > What do I need to do to get sshd to try to use PAM ... Set "PasswordAuthentication no" in sshd_config. ... Darren Tucker ... Good judgement comes with experience. ...
      (SSH)
    • Re: OpenSSH 4.2p1 and PAM - a problem
      ... interact with PAM while the parent continues to interact with the ... Most of the time this works fine, however PAM supplies a mechanism to ... Darren Tucker ...
      (SSH)