openssh unix dev - Oct 2004 - OpenSSH password expiration

Hi, we are running into an issue with changing expired passwords through
SSH connection.  We always have to tell our users to use telnet to change
the password.  We want to completely shutdown telnet on all of our systems,
because of this issue we are not able to shut it down.  Is there a known
issue with OpenSSH, or am I just missing some configuration.

Thanks in advance for your help.

-Sandeep

ssing at amkor.com wrote:
> Hi, we are running into an issue with changing expired passwords through
> SSH connection.  We always have to tell our users to use telnet to change
> the password.  We want to completely shutdown telnet on all of our systems,
> because of this issue we are not able to shut it down.  Is there a known
> issue with OpenSSH, or am I just missing some configuration.
This has been fixed since OpenSSH 3.8x.  What version are you using and 
on which platform(s)?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Hi Darren, we are running 3.9p1 and 3.8.1p1 on Solaris 7 and Solaris 8
systems, respectively.  I recently tested it again and could not get it to
work.  I cleared my password in NIS+ and when I tried to ssh into our NIS+
master server (hexadecimal), it will not give me an option to choose new
password (see below).  However, when I use telnet, I was able to change my
password.  Is there some special PAM or OpenSSH configuration that I need
to use?

I have been googling on this subject and could not find any solution.

Thanks for your help.
-Sandeep

SSH
===# ssh -l ssing hexadecimal
ssing at hexadecimal's password:
Permission denied, please try again.
ssing at hexadecimal's password:


telnet
====
# telnet hexadecimal
Trying 10.57.2.43...
Connected to hexadecimal.amkor.com.
Escape character is '^]'.
Authorized Use Only
      *** YOU HAVE ACCESSED A RESTRICTED SITE ***

********************************************************
 This system is for the use of authorized users only.
 Utilization of this computer system without authority,
 or in excess of granted authority is in violation of
 State and Federal laws. Violators will be prosecuted
 to the fullest extent.

 Please be advised that use constitutes consent to
 monitoring. (Elec Comm Priv Act, 18 USC 2701-2711)
********************************************************

login: ssing
Choose a new password.
New password:
Re-enter new password:
Enter login(NIS+) password:






Darren Tucker <dtucker at zip.com.au> on 10/21/2004 07:36:56 PM


To:    Sandeep Singh/CHAZ/AAWW at Amkor
cc:    openssh-unix-dev at mindrot.org


Subject:    Re: OpenSSH password expiration


ssing at amkor.com wrote:
> Hi, we are running into an issue with changing expired passwords through
> SSH connection.  We always have to tell our users to use telnet to change
> the password.  We want to completely shutdown telnet on all of our
systems,
> because of this issue we are not able to shut it down.  Is there a known
> issue with OpenSSH, or am I just missing some configuration.
This has been fixed since OpenSSH 3.8x.  What version are you using and
on which platform(s)?

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
 usually comes from bad judgement.