topic Re: How to force password change at 1st login? in Operating System - Linux

How to force password change at 1st login?

Debbie Fleith — Thu, 09 May 2002 14:48:27 GMT

I have a whole list of users to add to a new Red Hat 7.2 system and I want to add them without a password, or a temporary one, and have the system prompt them for a new login at 1st login time.

Anyone know how to do this?

Re: How to force password change at 1st login?

Sachin Patel — Thu, 09 May 2002 15:55:36 GMT

use -f options when you setup his/her temporary passwd.

for example you setup blanck password on /etc/passwd file then
#passwd -f sachin
newpasswd:*****
newpasswd:****

now when user sachin logs on with temporary passwd system will ask him to change his passwd.

-f This option forces the user to enter a new password on the next login.

Sachin

Re: How to force password change at 1st login?

Debbie Fleith — Thu, 09 May 2002 15:58:31 GMT

I tried passwd -f, it did not work. Does that only work if you select a particular shell for the user?

Re: How to force password change at 1st login?

Stuart Browne — Fri, 10 May 2002 00:39:22 GMT

No limitations of shell from the documentation I can see. It should be done at the LOGIN level (which is what spawns the shell).

What 'shell' are you using?

Re: How to force password change at 1st login?

Debbie Fleith — Fri, 10 May 2002 12:39:28 GMT

I've tried /bin/bash and /bin/sh

Re: How to force password change at 1st login?

Sachin Patel — Fri, 10 May 2002 13:39:37 GMT

Are you using this in NIS?

Sachin

Re: How to force password change at 1st login?

Debbie Fleith — Fri, 10 May 2002 13:48:11 GMT

No, NIS.

I've just tried adding users with useradd, and through GNOME's interface.

Re: How to force password change at 1st login?

MAD_2 — Sun, 12 May 2002 13:43:19 GMT

Conform to a local standard for first time logins. Let's say you create and id temp and give it the password id+random number, i.e. temp3991, so you give all your initial accounts a password with pattern id3991. Then tell the user what the password will be and that it will be prompted to change it on the first login (users should be aware that they will be prompted for the new password twice).

For the system to prompt for a new password at first login, the -f option should work:

# passwd -f temp3991
#

The user will login like this
login: temp
passwd: ######## (say temp3991)
new passwd: ########
new passwd: ########

Hope this helps!

Re: How to force password change at 1st login?

Stuart Browne — Sun, 12 May 2002 23:18:16 GMT

*blinks*

*finds a 7.2 box*

*tests*

ugh..

*reads documentation again*

ugh..

*plays some more*

ugh!

Ok.
1) passwd -f is NOT force user to change a next login. the '-f' flag under RH7.2 is for foricbly unlocking an account which has only an '!' in the password field.

2) Changing the "Password expires in" x "days" field to 0 doesn't force it to change the password now.

3) I'm having a bad morning :(

After reading through far too many man pages in a morning than could possibly be good for a person, I'm having to admit that you'll probably need a scripted solution in order to achieve this goal, or find a utility on the 'net that will do it for you (possibly a PAM plugin).

Unfortunately, I was unable to find such a thing in a quick 10 minute search.

Sorry.