As far as shell access (SSH) goes, once you create the account, run:
Where username is the new user you created. The existing password is now expired. When they log in using SSH, they'll enter the password you gave them and go through the following:
login as: oracle
Last login: Fri Jan 20 14:35:47 2006 from xx.xxx.xx.xx
WARNING: Your password has expired.
You must change your password now and login again!
Changing password for oracle
Enter the new password (minimum of 5, maximum of 127 characters)
Please use a combination of upper and lower case letters and numbers.
Re-enter new password:
It's not pretty (and entering the old password twice is a pain), but it saves you some mucking around.