ssh connection isue after password reset

[so_2]

Hi all,

I am facing a strange problem on an old hpux 10.20 OS.I am doing the following on a user account
#passwd --->and changing password
#passwd -f --->and expiring password
After that when I tried to login as the user (using ssh) after promting for the password its getting closed .

Below is the message i get
===============================
WARNING: Your password has expired.
You must change your password now and login again!
Usage: passwd [ -F file ] [ name ]
Connection to server01 closed.
===============================
The portion after password authentication , while using -vvv option of ssh is below

=========================================
WARNING: Your password has expired.
You must change your password now and login again!
Usage: passwd [ -F file ] [ name ]
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug2: channel 0: rcvd eof
debug2: channel 0: output open -> drain
debug2: channel 0: obuf empty
debug2: channel 0: close_write
debug2: channel 0: output drain -> closed
debug2: channel 0: rcvd close
debug2: channel 0: close_read
debug2: channel 0: input open -> closed
debug3: channel 0: will not send data after close
debug2: channel 0: almost dead
debug2: channel 0: gc: notify user
debug2: channel 0: gc: user detached
debug2: channel 0: send close
debug2: channel 0: is dead
debug2: channel 0: garbage collecting
debug1: channel 0: free: client-session, nchannels 1
debug3: channel 0: status: The following connections are open:
#0 client-session (t4 r0 i3/0 o3/0 fd -1/-1)

debug3: channel 0: close_fds r -1 w -1 e 7
Connection to server01 closed.
debug1: Transferred: stdin 0, stdout 0, stderr 32 bytes in 0.2 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 189.3
debug1: Exit status 1
==============================================
ssh version is OpenSSH_3.8p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003

If I am doing telnet I am able to login and change password.

Suspecting the issue of terminal, I used -t option for ssh but no change at all.
Could anyone please help me on this.

Thanks S O

[Vijaykumar_1]

Hello So,

"-f" option with password command is used to forcibly changing the password at next login.This doesn't activate your account.

Try changing the password and do an ssh to the ip. It should work..

[so_2]

Thanks Vijayakumar,
But I need the password to be expired by -f option , to force change the password during the next login.
The user id is not locked.
Requesting more assistance on this

Thanks
Shinoj

[Dennis Handly]

>Usage: passwd [ -F file ] [ name ]

Do you happen to know which command is producing this message?
This bad passwd(1) command isn't in some .profile or /etc/profile?

[so_2]

Hi Dennis,

The passwd command is not given on any profile file.
Its running as a part of login process as I have made the password expired , to focrefully change during next login

Thanks
so

[so_2]

Hi ,
Any one have any suggestion to this issue. I am breaking my head with different options, but nothing turned success.

Thanks
SO

[nightwich]

Hi so

I trie to reproduce your problem but I do not have success ( 11iv2 ssh version HP-UX Secure Shell-A.04.30.007) ..


I think may be a problem of a ssh version.

Try update ssh if you can then reply ..

Regards.

[SUDHAKAR_18]

Hi,

change the password for user and do
# su - username
and also restart sshd daemon
# ps -ef |grep -i sshd
#kill -HUP

[so_2]

Hi nightwich,

Thanks for your time in simulating the issue.
We have multiple versions of ssh running and problem happen to there as well. Also the problem is there for
AIX and solaris servers.
A friend had informed me that, if the reverse name lookup did not give proper hostname , during authentication
then this kind of issue happens. I changed the resolv.conf entry to point another DNS server as primary DNS,
and this time it woked fine.(For ths syetem I shown in the first message)

I did the same on other servers as well, but cant repeat my success. But I believe that the DNS and ssh authentication
is having some strong relation. If some one could explain what it is or if could direct me to a good link where I get the information,
it will be very helpfull for me.

Thanks
so

[nightwich]

Hi so

Yes you are right the ssh need to have a correct DNS configuration.

You can try to run ssh in bebug mode

ssh -vvv machine_name

To test your DNS try.

nslookup machine_name
and
nslookup ip_from_machine_name

Do it several times see if the responses are correct.

Hope this helps.

Regards.