0

When i expire a users password with "chage -d 0 USER" the user is able to log in and they are prompt with Current Unix password. When the user puts anything into the password the session is closed. inside the /var/log/secure there is a log entry "pam_unix(sshd:auth): authentication failure"

if the user manually does passwd after i reset their password they have no issues.

What can i look at to solve this issue where expire causes pam_unix to freak out and prevent the user from updating their expired password?

Aug 14 20:34:38 ip-172-30-0-196 sshd[27369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.1.1.123 user=XXX Aug 14 20:34:40 ip-172-30-0-196 sshd[27369]: Failed password for XXX from 10.1.92.123 port 51240 ssh2

New contributor
user3808748 is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
0

in /etc/ssh/sshd_config

changed line UsePrivilegeSeparation no to UsePrivilegeSeparation yes

New contributor
user3808748 is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.

Your Answer

user3808748 is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.