Re: Forced password changes and other PAM modules using passwords

[Floris Bos <bos [at] je-eigen-domein.nl>]

On 05/06/2017 07:23 PM, Floris Bos wrote:
> But now I would like to force users to change their password on first 
> login.
> If I set a user's account to shadowLastChange to 0 and shadowMax to 
> 10000, the user indeed gets prompted to change his password.
> However in that case mounting the home directory afterwards fails.
> I think this is caused by libpam-mount still trying to use the old 
> password to login, and not the new password entered.
>
> Is there any way to make libpam-ldapd pass the new password through to 
> PAM modules that come after it?

Managed to solve the problem.

Wasn't related to pam-ldapd, but just a pam configuration problem with 
pam-mount instead.
The standard Debian package only added pam-mount to common-auth (to 
capture initial login password) and common-session (to do the actual 
mounting).

While it has to be added to /etc/pam.d/common-password as well, to be 
able to capture the new password on forced password changes.


Yours sincerely,

Floris Bos

--
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
https://lists.arthurdejong.org/nss-pam-ldapd-users/