[Bug 14] Can't change expired /etc/shadow password without PAM

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Fri Jan 10 00:30:54 EST 2003


http://bugzilla.mindrot.org/show_bug.cgi?id=14

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         OS/Version|other                       |All



------- Additional Comments From dtucker at zip.com.au  2003-01-10 00:30 -------
I had seen those options in a man page for ssh-1.2.something and assumed that 
they would be needed.

For PasswordExpireWarningDays, you're right, I missed the sp_warn field in spwd. 
 AIX doesn't need it either, its warning messages are generated by 
passwdexpired().

Not sure about ForcedPasswdChange, should the admin have this option?  (if you 
don't want password expiry then don't turn it on)

The last time someone suggested PAM-chauthtok-via-passwd the objection was that 
passwd used the "passwd" PAM service and sshd used the "sshd" service and they 
might do different things (although normally they don't).  Is this a PAM-purist 
thing?

(Changed platform to "All", this bug covers a lot of them).



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.



More information about the openssh-unix-dev mailing list