SLES9 with YP, password expiration and ssh

[Brendan J. Murphy]

Has anyone gotten password expiration to work in a SLES9 yp environment while using ssh?

On the yp client passwd -S reports proper information and I know it works with rlogin, but we don't like to use r* services. When using ssh, you do not get a warning that your password is about to expire and when it has expired, ssh still lets you in.

I'm thinking this is a pam issue, but where to start? pam.d/login and pam.d/ssh are the same with the exception of securettys which doesn't apply to ssh.

[Ragu_3]

SLES9 is sold by SuSE, it may have support, so please call up SuSE support and ask.

[Atul Gautam]

Hi Brendan,

There is a module which can be used for the same functionality which is "pam_pwdb.so".

Beside this, you can go through the PDF doc that I've attached. It will provide you with the information for all the modules used in PAM.



ATUL

[Brendan J. Murphy]

In regards to the comment regarding calling SuSE for support, we already pay a lot of money to HP for SuSE support. However I can always re-evaluate where we get our SuSE support from if you'd like.