passwd

[Mike Burk]

How do I restrict users from changing their password?

Thanks,

Mike

[G.Kumar · Accepted solution]

You can use SAM to modify user passwd options
select passwd change only by superuser

[Jay Newman]

I will assume that your users do not have superuser access.
If you want the easy way out, run SAM, modify a user, go to "modify password options" and set it to "Allow only Super-User To Change Password".
There may be a command line syntax to accomplish the same task, but this should do the job for you unless you have a large user base and are trying to write it into a script.
HTH

[Mike Burk]

My systems has been converted to a "Trusted System". The option in SAM is no longer available. Now how do I do it?

[linuxfan]

Hi Mike,

/usr/bin/passwd and /sbin/passwd are normally a suid exectables, change the permission to 555 or even better 550, then any non-root user cannot execute passwd.

-HTH
Ramesh

[Bill Thorsteinson]

If you don't want to prevent all non-root users from
changing their password you can create a group
which has access to password change uility.

add a new group for passwd,
chmod the passwd exculables to 550 (chmod o-rx)
change the group to the password group (chgrp passwd)
add users you want to be able to change their
passwords to the passwd group.