Password SSH

[Rafael Casero]

I'm currently using "putty" connecting SSH w/ RedHat 3.0 Ent. When I expired the usrs password with the following command.

chage -d 0 "username"

When I connect with "putty" I get the login prompt when my temp password is entered it just closes my session. I have edited the sshd_config file

#UsePrivilegeSeparation no

HELP...

Ralph.

[Ivan Ferreira]

It seems that it's a bug, see:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124602

http://rhn.redhat.com/errata/RHSA-2005-106.html

[Steven E. Protter]

put up the rest of that config file.

on the console

tail -f /var/log/messages

try a log on.

post the output that appends to the end of your log.

SEP

[Rafael Casero]

[root@avm_gnvlx02 ssh]# tail -f /var/log/messages
Oct 9 04:02:25 avm_gnvlx02 syslogd 1.4.1: restart.
Oct 10 08:29:21 avm_gnvlx02 passwd(pam_unix)[14376]: password changed for ralph
Oct 10 08:31:23 avm_gnvlx02 sshd(pam_unix)[14399]: expired password for user ral ph (root enforced)
Oct 10 08:31:23 avm_gnvlx02 sshd(pam_unix)[14401]: session opened for user ralph by (uid=505)
Oct 10 08:31:24 avm_gnvlx02 sshd(pam_unix)[14401]: session closed for user ralph
Oct 10 08:32:38 avm_gnvlx02 sshd(pam_unix)[14403]: expired password for user ral ph (root enforced)
Oct 10 08:32:38 avm_gnvlx02 sshd(pam_unix)[14405]: session opened for user ralph by (uid=505)
Oct 10 08:32:38 avm_gnvlx02 sshd(pam_unix)[14405]: session closed for user ralph
Oct 10 08:34:17 avm_gnvlx02 sshd(pam_unix)[14407]: session opened for user root by (uid=0)
Oct 10 08:34:38 avm_gnvlx02 sshd(pam_unix)[14407]: session closed for user root

[Ivan Ferreira]

One more thing, the "UsePrivilegeSeparation no" must be uncommented. If it's commented, it gets the default "yes" and won't work.

[Gopi Sekar]

From the log messages it is clear that SSHD is deniying logon connections with expired passwords.

Why do you want to achieve this? If you let us know the purpose then it may be possible to fine tune it or come up with a better suggestion.

Gopi

[Andrew Cowan]

Try chage -d -1 "username" to disable the password ageing on this account. I think that "-d 0" does not work as the RedHat documentation suggests.

[Rafael Casero]

I have several users that need to get created, and I would need them to change the password upon logging in for the first time.

[Rafael Casero]

Ivan, this did the trick I uncommented it and bingo it worked..

Thanks everyone for the support.

Ralph.