password expiration/change request fails to ask
Russ Allbery
rra at stanford.edu
Tue Oct 13 17:40:03 EDT 2009
Jeff Blaine <jblaine at kickflop.net> writes:
> % ssh cairo
> jblaine at cairo's password:
> Permission denied, please try again.
Judging from the password prompt that you're getting, you do not have
ChallengeResponseAuthentication enabled on your ssh server, which means
that it cannot do a full PAM dialogue. The simple PasswordAuthentication
ssh protocol can only handle a password prompt and response, not any
additional conversation such as an expired password change.
Check your sshd_config; I suspect that if you enable ChallengeResponse, it
will start working.
--
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the Kerberos
mailing list