On Wed, 2013-01-02 at 17:47 -0500, Chris Natter wrote:
> Hello,
> 
> My users are running into a bit of a problem with password expiry and
> the reset prompts.
> 
> When they attempt to reset their password they end up recieving access
> denied messages after going through the prompts to reset their
> password
> and entering their new desired passwords.
> 
> The interesting thing is that if I reset the password via the Web UI
> to anything,
> and then have the user try again with the new password, they are able
> to 
> successfully reset their password with no issues.
> 
> Log snippets are below, I've sanitized them so the user in question is
> 'juser'.
> 
> Any help or guidance would be very appreciated. Thank you!
> 
> 
They are probably failing to meet password policies but sshd is not
using pam conversations.
Set ChallengeResponseAuthentication yes in sshd_config, this should
allow conversations and proper errors to show up.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to