<html dir="ltr"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style> </head> <body ocsi="0" fpstyle="1"> <div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi, My understanding is on first login with a IPA'd reset password the user should be forced to change to a permanent password immediately and not continue to login? as below this appears to be not the case....how do I set this? or is it a bug? Also the 1 hour warning seems new? copy and paste as below, ======== [yyyyy@8kxl72s ~]$ ssh vuwunicosas0002.ods.vuw.ac.nz -l xxxxxxx xxxxxxxx@vuwunicosas0002.ods.vuw.ac.nz's password: Creating home directory for xxxxxxxx. Kickstarted on 2012-02-27 [xxxxxxxxx@vuwunicosas0002 ~]$ passwd Changing password for user xxxxxxxxx. Current Password: New password: Retype new password: Password change failed. Server message: Password change failed Err5: Password too simple. Warning: Your password will expire in less than one hour on Mon Jun 18 11:39:00 2012 passwd: Authentication token manipulation error [xxxxxxxxx@vuwunicosas0002 ~]$ passwd Changing password for user xxxxxxxxxxx. Current Password: New password: Retype new password: Warning: Your password will expire in less than one hour on Mon Jun 18 11:39:00 2012 passwd: all authentication tokens updated successfully. [xxxxxxxxx@vuwunicosas0002 ~]$ [xxxxxxx@vuwunicosas0002 ~]$ logout Connection to vuwunicosas0002.ods.vuw.ac.nz closed. [yyyyyyy@8kxl72s ~]$ ssh vuwunicosas0002.ods.vuw.ac.nz -l xxxxxxxxx xxxxx@vuwunicosas0002.ods.vuw.ac.nz's password: Last login: Mon Jun 18 11:39:25 2012 from 130.195.245.249 Kickstarted on 2012-02-27 [xxxxxx@vuwunicosas0002 ~]$ =========== <div> <div style="font-family: Tahoma; font-size: 13px;"> regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 </div> </div> </div> </body> </html>