passwords for new users

r.stiltskin · 02-02-2006, 06:09 PM

What's the best way to set up new user accounts with a temporary password that can only be used once, so they are required to create new passwords for themselves immediately?

slackhack · 02-02-2006, 06:37 PM

man passwd shows:

Code:

  Password expiry information
       The password aging information may be changed by the super user...

       If you wish to immediately expire an account's password, you can use the
       -e option. This in effect can force a user to change his/her password at
       the user's next login. You can also use the -d option to delete a user's
       password (make it empty). Use caution with this option since it can make
       an  account  not require a password at all to login, leaving your system
       open to intruders.

it's not really clear if that means the user has to be logged in when you do passwd -e on them, or whether you can do it when making the account (or when they are otherwise logged out), meaning they could log in once and then would have to change the pw. but if it doesn't work the way you need, you could use the option to have it expire within a day, which might be the next best thing. man passwd

~=gr3p=~ · 02-08-2006, 05:21 AM

Quote:

Originally Posted by slackhack

man passwd shows:

it's not really clear if that means the user has to be logged in when you do passwd -e on them, or whether you can do it when making the account (or when they are otherwise logged out), meaning they could log in once and then would have to change the pw. but if it doesn't work the way you need, you could use the option to have it expire within a day, which might be the next best thing. man passwd

hey in my fedora core 3 passwd -e option doesn't exsist. I used chage to achieve this or passwd -x 0 <username>.