[Fedora-directory-users] forcing users to change passwords on next login

[mj at sci.fi]

> Hi, all.  
> 
> Any idea how to force a user to go through a password change on the next login?  I checked the box
> in the main config "user must change password after reset", then changed the user's password from
> the UI but that doesn't seem to be doing anything.  The user just logs in with the new password as
> usual.  I want a prompt saying (after the  newly reset password has been entered) 
> 
> "Your password has now expired, please enter a new password."
> 
> Anyway to do that?  I've UseLogin set to yes in sshd_config, if that helps any... 


1. The pam_ldap module doesn't support Netscape password policies anymore IIRC, so you will never see that notice on a pam_ldap enabled machine.

2. The bind should just fail, nonetheless. If it really doesn't, then this is a bug somewhere...

--
mike