[Bug 2796] New: sshd should allow clients to explicitly request the password change

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Oct 19 01:09:19 AEDT 2017


https://bugzilla.mindrot.org/show_bug.cgi?id=2796

            Bug ID: 2796
           Summary: sshd should allow clients to explicitly request the
                    password change
           Product: Portable OpenSSH
           Version: 7.6p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: z.pekar at gmail.com

sshd should allow clients to explicitly request the password change, as
written here ( https://winscp.net/eng/docs/task_change_password ):
"SSH protocol allows changing an account password. But many SSH
servers, notably the OpenSSH, does not actually allow that."

While it is less important for ssh sessions, because passwd command can
be used - it is crucial for the cases when users can login only with
sftp clients (and are denied shell access). In such situations there is
now way for a client to initiate a password change.

If you decide to implement this - sftp client should be enhanced as
well to allow explicitly request the password change.

Thank you!

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list