On Wed, 2013-01-02 at 17:47 -0500, Chris Natter wrote: > Hello, > > My users are running into a bit of a problem with password expiry and > the reset prompts. > > When they attempt to reset their password they end up recieving access > denied messages after going through the prompts to reset their > password > and entering their new desired passwords. > > The interesting thing is that if I reset the password via the Web UI > to anything, > and then have the user try again with the new password, they are able > to > successfully reset their password with no issues. > > Log snippets are below, I've sanitized them so the user in question is > 'juser'. > > Any help or guidance would be very appreciated. Thank you! > > They are probably failing to meet password policies but sshd is not using pam conversations. Set ChallengeResponseAuthentication yes in sshd_config, this should allow conversations and proper errors to show up.
Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ Freeipa-users mailing list Freeipaemail@example.com https://www.redhat.com/mailman/listinfo/freeipa-users