Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
01-26-2004, 11:42 AM
|
#1
|
|
LQ Newbie
Registered: Sep 2003
Location: Cincinnati
Distribution: RH 9
Posts: 5
Rep:
|
Forcing password change at first login
Hi all,
How do I enforce users to change their passwords the first time they logon?
|
|
|
|
01-26-2004, 12:36 PM
|
#2
|
|
LQ Veteran
Registered: Sep 2003
Location: the Netherlands
Distribution: lfs, debian, rhel
Posts: 8,703
|
This is one way of doing it. It forces a user to change his/her password, can be used any time you (root) want:
$ chage -d 0 -M 999 <user>
If you are using password aging you don't need the -M 999 part.
|
|
|
|
01-26-2004, 12:40 PM
|
#3
|
|
LQ Newbie
Registered: Sep 2003
Location: Cincinnati
Distribution: RH 9
Posts: 5
Original Poster
Rep:
|
Thanks, that solved it.
|
|
|
|
01-26-2004, 06:22 PM
|
#4
|
|
LQ Newbie
Registered: Sep 2003
Location: Cincinnati
Distribution: RH 9
Posts: 5
Original Poster
Rep:
|
Hi all,
Another issue. When I do a
chage -d 0 -M 999 <username>
we are assuming that the user is going to have a direct access to the machine's console so will be prompted for a change password stuff by the system. But when the user tries this with "ssh" session, he gets bombed out when first time logging in. It asks for password first time and when he enters the right password, it says that
Server responded "Connection closed".
Connection to the remote host was lost.
and nothing more. This is because SSH does not know how to handle the change password.
Any clarifications?
Cheers,
|
|
|
|
01-27-2004, 12:36 AM
|
#5
|
|
LQ Veteran
Registered: Sep 2003
Location: the Netherlands
Distribution: lfs, debian, rhel
Posts: 8,703
|
I don't understanf why it isn't working with ssh:
Changed the password for one of the users and tried to log in using ssh:
$ ssh -l someuser inferno
someuser@inferno's password:
Password changing requested. Choose a new password.
Warning: Your password has expired, please change it now
Old Password:
New password:
Re-enter new password:
Password changed
No problems whatsoever. Did you check the ssh settings?
|
|
|
|
01-27-2004, 11:44 AM
|
#6
|
|
LQ Newbie
Registered: Sep 2003
Location: Cincinnati
Distribution: RH 9
Posts: 5
Original Poster
Rep:
|
Sorry. I forgot to mention that the SSH that I was talking about is the ssh client on windows side. Do you think it will still work if somebody tries to connect from a windows box to this linux ws using ssh client?
i was not successful atleast.
Please reply when convenient. Thanks
Cheers,
|
|
|
|
01-27-2004, 11:57 AM
|
#7
|
|
LQ Veteran
Registered: Sep 2003
Location: the Netherlands
Distribution: lfs, debian, rhel
Posts: 8,703
|
I haven't used windows in over 5 years, so windows related questions I cannot (or hardly) answer. I will give it a try:
I've heard about a program called putty that is suposed to be a good ssh client for windows.
Will it allow users to change their password? I really don't know. But if I guess it seems logical that it should. Passwords should change on a regular base and if your only access is an ssh client.......
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 12:53 PM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|