Public bug reported:

As the administrator of an authentication environment, I would like my
users to be able to reset their password from the lock screen if their
password expires.

Allowing a user to reset their password from a lock screen for a month
after password expiry is no less secure than allowing the user's
password to expire one month later and emailing them relentlessly.

If you allow the option to lock them out and require a password reset at
a time period earlier than their expiration, their security privileges
are never escalated, only reduced. I think that's an acceptable security
policy, and would also be a very useful feature.

something something pipe to passwd, maybe?

** Affects: lightdm (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1612900

Title:
  Reset Password from lock screen

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1612900/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to