password expiration with xwindows clients using secure shell

[Scott Lindstrom_2]

We use Hummingbird Exceed with the ssh add-on, and are about to turn off telnet access.

Our security admins setup the user's logonids to expire perodically (passwd -x). When we try connecting via Exceed with a loginid that has expired, nothing happens. This is what the vendor tells me:

"The only Start Methods supported for the Password aging feature is 'telnet' and 'rlogin'. The sshd service on the Unix side does not support password aging. There is nothing we can do about this since sshd just gives access denied when the password has aged, refuses connection without informing user that it should change password."

Does that seem right? If I ssh between servers, I get the following:

ssh
Password:
Warning: Your password has expired, please change it now.
Changing password for
Old password:
New password:
Re-enter new password:
Passwd successfully changed

Does sshd really not support password aging? (HP-UX Secure Shell A.03.50.000)

Scott Lindstrom

[Alex Glennie]

Been digging around ....HP's Secure Shell version A.03.10.002 did work correctly with password aging and I think 3.50 didn't : advise is try latest version : A.3.61.001 though looking at the release notes for the latest versions (3.6) I didn't see anything in the what's new section refering to it ...maybe it was a bug

[Donny Jekels]

Scott,

This is not an HP Secure Shell feature. In your sshd_config file.

look for an entry

UseLogin = Yes

turn it off and this feature will go away.
but keep it on for your own sanity.

better, download OpenSSH, compile it yourself and get rid of HP-SecureShell