What exactly do you need help with? It sounds like you are able to set it back with the root account. What else do you want to do? Turn off password history or expirations?

Hi Sudarsh,

Could you please paste what error are you getting exactly.

Hi

I would like to have it possible that the user "abcde" himself can change the password after it has expired.

You should not go against the rules of unix.

But yes, there is a tweak. You can give him sudo right to run this command
You can give this a try, get back if you face any problem.

NO, giving sudo rights means, we enable a user to run few commands decided by us as root.
root interference is NOT needed. You might need this to implement sudo rights


Dear, what you are saying is to have a password less user abcde. Do you think this is right ? Anyone, in you network can have access to this user and he would be delighted to have a password less access. If you are thinking to have a password less access, more suitable way is to implement ssh keys.

I would request you to give me you requirement, what exaclty are you looking :
1) A password less account
2) User can himself can change the password after it has expired (as mentioned in your earlier post).

Also, you can set abcde password as non-expiring. This password will never expire.

Hi Vikas,

First of all, thank you very much for the sudoers' and the ssh keys links.

About my requirement:
you are right, I dont need a password less user, I need a user who can change his password himself whenever it expires, without involving the root in anyway. At present, every 45 days, the passwd expires. So, whenever the user tries to login through ssh after passwd expiry, he is informed so, but he cannot change the password himself.

Actually, I have checked the chage -l option too, and the values are:
lab-139:~ # chage -l "abacde"
Minimum: 0
Maximum: 10000
Warning: -1
Inactive: -1
Last Change: Apr 22, 2008
Password Expires: Never
Password Inactive: Never
Account Expires: Never
lab-139:~ #

However, it doesnot take effect, possibly because we seem to be using a customized version of linux. I think this is the root of all the problem.


-Sudarshan

See, in any case it is not possible for a user to change his password after it expires.

BUT, what can be done is give him sudo rights so that he can change his pasword when while logging it starts giving him warning that his password is going to expire. As explained in earlier post, this command can be used. This is the only solution I can think of.

Hope this helps and this thread closes here.

You need to enable the warning period, so that he starts getting warnings eg 5 days before expiry. Once its expired and he's logged out, obviously he cannot login again, that's the point of expiring a passwd.
See the -W switch http://linux.die.net/man/1/chage