Re: SSH and expired passwords

[Chris Kloiber <ckloiber redhat com>]

On Wed, 2005-04-06 at 15:23 -0400, Ken Snider wrote:
> Jurvis LaSalle wrote:
> > A users password expired while on vacation.  When trying to ssh into the
> > server (running RHEL3-U4), he was greeted with this message:
> > 
> > You are required to change your password immediately (password aged)
> > Your password has expired, the session cannot proceed.
> > Connection to server.bard.edu closed.
> > 
> > What do I need to enable in sshd_config so that he's prompted to change
> > the expired password rather than just kicking him.  I'd like to keep
> > X11Forwarding and UsePrivilegeSeparation enabled if I can.
> 
> You have to disable Privilege Separation, so that the sshd can maintain root
> privileges (and access to /etc/shadow).

FYI- There is an open bug on this with test packages to try and resolve
this.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124602

-- 
Chris Kloiber, RHCX
Global Support Services
Red Hat, Inc.