openssh bugs - Sep 2003 - [Bug 723] Password expire not working properly

http://bugzilla.mindrot.org/show_bug.cgi?id=723

           Summary: Password expire not working properly
           Product: Portable OpenSSH
           Version: -current
          Platform: Sparc
        OS/Version: Solaris
            Status: NEW
          Severity: major
          Priority: P2
         Component: Build system
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: stefan at stebo.se


I have compiled openssh-3.7.1p2 with pwexp24 with following options:

./configure --prefix=/usr/local --with-pam --enable-static=yes
--sysconfdir=/usr/local/etc --without-rand-helper --libdir=/usr/lib

I have run some tests on password expire, and cannot get it to function
properly. When I force a user to change his/hers password at next login, they
get in without changing the password. When I telnet to the system it works
properly. Here is a printout of selected commands:

bash-2.05# pkginfo -l OBSDssh
   PKGINST:  OBSDssh
      NAME:  OpenSSH for Solaris
  CATEGORY:  application
      ARCH:  sparc
   VERSION:  3.7.1p2-pwexp24
   BASEDIR:  /
    PSTAMP:  ps15120030924133714
  INSTDATE:  Sep 24 2003 13:38
    STATUS:  completely installed
     FILES:     54 installed pathnames
                10 shared pathnames
                 5 linked files
                18 directories
                12 executables
                 1 setuid/setgid executables
             12505 blocks used (approx)

bash-2.05# uname -r
5.8

bash-2.05# passwd peter
New password: 
Re-enter new password: 
passwd (SYSTEM): passwd successfully changed for peter

bash-2.05# ssh -l peter localhost
peter at localhost's password: 
Warning: No xauth data; using fake authentication data for X11 forwarding.
Last login: Tue Sep 30 13:42:23 2003 from localhost

Sun Microsystems Inc.   SunOS 5.8       Generic Patch   October 2001
Test by stebo
Sun Microsystems Inc.   SunOS 5.8       Generic Patch   October 2001
Test by stebo
$ Connection to localhost closed.

bash-2.05# passwd -f peter

bash-2.05# ssh -l peter localhost
peter at localhost's password: 
Warning: No xauth data; using fake authentication data for X11 forwarding.
Last login: Tue Sep 30 13:54:06 2003 from localhost

Sun Microsystems Inc.   SunOS 5.8       Generic Patch   October 2001
Test by stebo
Sun Microsystems Inc.   SunOS 5.8       Generic Patch   October 2001
Test by stebo
$ Connection to localhost closed.

I have no idea why this doesn't work. 
Would be very glad if some masterminded soul could enlighten me ;)

Regards 
Stefan



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=723

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|openssh-bugs at mindrot.org    |dtucker at zip.com.au
          Component|Build system                |sshd



------- Additional Comments From dtucker at zip.com.au  2003-09-30 22:17 -------
Is HAS_SHADOW_EXPIRE undef'ed in config.h?  Try adding "#define 
HAS_SHADOW_EXPIRE 1" to config.h and recompiling.

Since that patch isn't part of OpenSSH itself (although the probable cause
is),
I'm re-assigning to me.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.