How to force user to change password after expiration in Linux?

ssy68 · 02-07-2008, 04:19 PM

In Linux system, I have the password aging set to 2 days in /etc/login.defs. I created a user and password. After 2 days, when I try to login, the user is locked out because of password has been expired. Is there a way that can allow the user to login after the password expires, but force the user to change the password after login and the user is not allowed to do anything without changing a new password?

Thanks.

leonscape · 02-07-2008, 04:42 PM

IF your using shadow suite, then simply set the inactive to how many days after the password expires to allow the user to change it. 0 means never make the account inactive.

To change a current user

usermod -f0 username

To make this the default for new users

useradd -D -f0

ssy68 · 02-11-2008, 12:59 PM

I tried this, but I still can not login after the user password is expired, and there is no way to change password for the user except login as root. Is there any other way or script or so can do the thing as I expected?

Thanks.

ssy68 · 02-11-2008, 02:32 PM

I also tried to use "passwd -e user" to expire a user and see if the force password changing functionality work, but I don't see the prompt to force me to change password. Is my linux system or PAM module has problem? or there is any configuration I need to change to see the force prompt? or I need other modules to make work? How to debug/fix this issue?

Thanks.