Password change on first login via ssh

Boyd Kelly boyd.kelly at businessobjects.com
Tue Aug 30 19:24:51 UTC 2005


Hello,

I am having a problem getting RH 3.0 to prompt user to change password
on first login with ssh.  This works more or less ok on RH 2.1,
perfectly on Gentoo 2.6 kernel, but not at all on RH 3.0.

I do the following:

Useradd newuser
Usermod -p "" newuser
Chage -d 0 newuser


RH 2.1
If newuser connects via ssh on RH 2.1, they are prompted for a password.
If the user types anything, then they are then prompted to enter a new
password immediately.  That's ok as long as the user knows that they
should initially type anything at all in order to get the second prompt.

Gentoo
If newuser connects via ssh on Gentoo, the receive immediately the
following prompt: You are required to change your password immediately
(root enforced)
New UNIX password:

This is expected behaviour.

RH 3.0
If newuser connects via ssh on RH 3.0, the they are prompted for a
password, if the use types 'asdfasdf', pressing enter closes the ssh
session.  Pressing enter without typing a password also closes the
session.


I have copied the /etc/pam.d/ config files from RH 2.1 and Gentoo over
to the RH 3.0 system, with no luck.

Is this a pam version/module version issue?  Any ideas how I can enforce
a password change on first login on RH 3.0?

Thanks,

Boyd




More information about the Pam-list mailing list