password expiration/change request fails to ask

[Russ Allbery]

Jeff Blaine <jblaine at kickflop.net> writes:

> % ssh cairo
> jblaine at cairo's password:
> Permission denied, please try again.

Judging from the password prompt that you're getting, you do not have
ChallengeResponseAuthentication enabled on your ssh server, which means
that it cannot do a full PAM dialogue.  The simple PasswordAuthentication
ssh protocol can only handle a password prompt and response, not any
additional conversation such as an expired password change.

Check your sshd_config; I suspect that if you enable ChallengeResponse, it
will start working.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>