Re: reset user password?

[Werner Puschitz <wp puschitz com>]

On Tue, 30 Oct 2001, Anthony E. Greene wrote:

> On Wed, 31 Oct 2001, gary wrote:
> >In fact, I'm looking for some where to set, so that when user login next
> >time, the system will ask for new password and confirm password after
> >entering login name (without asking for old password)
> 
> How will the system know that this person is authorized to change the
> password?

When you force someone to change the password at the next login, e.g.
"chage -d 0 [username]", then this is what happenes:

login: test
Password:
You are required to change your password immediately (root enforced)
Changing password for test
(current) UNIX password:        <<<====================
New password:
Retype new password:
Last login: Tue Oct 30 23:49:50 from 210.210.210.10
[test mars test]$

So you already logged in to the system with the current password but you 
have to provide your current password AGAIN. This always confuses people 
when I do this for new created user accounts. 
After you logged in, you should not be asked again for the current 
password. E.g. AIX doesn't do this.

Werner