topic Re: Problem with ssh and preexpired password in Operating System - OpenVMS

Problem with ssh and preexpired password

Vaclav Dolezel — Mon, 04 Apr 2005 08:00:15 GMT

Hello. I Found on wizard number 9880 same problem like me. But the solutions is not working. I have OpenVMS 7.3-2 and I use PowerTerm Plus Emulation. I try putty last version and this don't work too. But the product Reflection 12.0.6 form WRQ is working. Where is the problem? Thanks for your information. VD

Re: Problem with ssh and preexpired password

Ian Miller. — Mon, 04 Apr 2005 09:07:23 GMT

http://h71000.www7.hp.com/wizard/wiz_9880.html
does say that some clients work and some dont.
Another workaround is to disable forcing
users to change their passwords
in authorize
MOD username/FLAG=DISFORCE_PWD_CHANGE

Re: Problem with ssh and preexpired password

Vaclav Dolezel — Tue, 05 Apr 2005 03:07:18 GMT

I now, that work. But we need, so as our users don't access to command line. If i set flag DISFORCE_PWD_CHANGE, the users jump to command line. VD

Re: Problem with ssh and preexpired password

Ian Miller. — Tue, 05 Apr 2005 05:56:28 GMT

The TCPIP V5.5 release notes mention setting the option and say that Putty is one the two clients known to work.

Re: Problem with ssh and preexpired password

Ian Miller. — Tue, 05 Apr 2005 06:13:57 GMT

For V5.4
http://h71000.www7.hp.com/doc/732final/aa-rvbua-te/aa-rvbua-te.html

Re: Problem with ssh and preexpired password

Ian Miller. — Tue, 05 Apr 2005 07:31:55 GMT

Note you should be up to date with putty 0.57
http://www.chiark.greenend.org.uk/~sgtatham/putty/
20th February 2005

Re: Problem with ssh and preexpired password

Vaclav Dolezel — Tue, 05 Apr 2005 08:06:00 GMT

Thanks for your information.I using last version of putty. I change in ssh setings file parameter "DisableLanguageTag" to value YES, but still don't working.

Re: Problem with ssh and preexpired password

Ian Miller. — Tue, 05 Apr 2005 08:35:55 GMT

and you have set AllowNonvmsLoginWithExpiredPw to be YES on the SSH server config file?

What version of TCPIP and which patches?

Re: Problem with ssh and preexpired password

Vaclav Dolezel — Tue, 05 Apr 2005 08:37:55 GMT

Version of TCPIP patch is 5.4-154,
and parametr AllowNonvmsLoginWithExpiredPw is set to YES.

Re: Problem with ssh and preexpired password

CadillacCulkin — Tue, 14 Mar 2006 10:01:45 GMT

I am having a very similar problem with expired passwords - I have Version 5.5 of the TCP/IP and the latest version of Putty.

AllowNonvmsLoginWithExpiredPw = YES

Any Suggestions

Thanks for your time.

Re: Problem with ssh and preexpired password

Anup Kumar — Thu, 06 Apr 2006 02:37:57 GMT

Hi Folks,

I am running tcp/ip V5.4 with latest ECO 5 patchkit. I have got some accounts on server which are supposed to have null password which should not expire with password lifetime set to 30 days. I have seen once pwd lifetime is reached , ssh login prompts user to change the passsword but at the same time telnet login lets the user in with asking to change the password.

In my environment, Its mandatory to set pwd lifetime and we cannot set DISFORCE_PWD_CHANGE flag on accounts. Is there any workaround so that ssh login does not to change the password. I even tried resetting the account as

mos acccountname/nopass/nopwdexp

Still once the pwd lifetime is reached, ssh login prompts to change the passwword but tetlnet login no issues. Please advise ?

Re: Problem with ssh and preexpired password

JCG — Tue, 09 Jan 2007 15:40:05 GMT

I got it to work!!
Edit the file:
SYS$SYSDEVICE:[000000.TCPIP$SSH.SSH2]SSHD2_CONFIG.

There is a line in this file that says this:
# AllowNonvmsLoginWithExpiredPw no
Change it to the following:
AllowNonvmsLoginWithExpiredPw yes

Also, if you are using PuTTY, you will need to use the latest "development snapshot", NOT the latest release, it doesn't support SSH-2 password expiry mechanisms.