User should not change password

shan_nathan · 11-01-2007, 09:57 AM

Dear all,

How to deny a normal user , for changing his own password.

Thanks

reverse · 11-01-2007, 11:24 AM

Maybe something like:

Code:

chmod -s `which passwd`

I don't know if you should do that.. nor why you'd want to do that.

Micro420 · 11-02-2007, 11:50 AM

Not sure if this will work, but you can also use the chage command set the MINIMUM days for a password change to something like 9999. This will force a user to wait 9999 days before he or she can change their password

Another thing to look at would be in /etc/pam.d/. Maybe there is a setting somewhere in there to do this by default.

complich8 · 11-02-2007, 04:42 PM

I'd go for chmod o-rx `which passwd` myself.

same effect, except that passwd still works. You could go further and enable specific users or groups to execute the passwd command using posix acl's...