https://bugzilla.novell.com/show_bug.cgi?id=414783 Summary: PAM mandatory kerberos password changes are not enfored Product: openSUSE 11.0 Version: Final Platform: i386 OS/Version: openSUSE 11.0 Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: admin@dmarkey.com QAContact: qa@suse.de Found By: Customer If a user has an expired kerberos password they are not required to change and access is granted regardless: dmarkey@Jebb:~> ssh dmarkey@localhost Password: Warning: Your password will expire in less than one hour on Thu Jan 1 01:00:00 1970 Warning: password has expired. Old Password: Last login: Tue Aug 5 18:18:50 2008 from localhost Have a lot of fun... dmarkey@Jebb:~> KDC is Heimdal, this was also tested with an MIT KDC running on 10.3 and also failed, this works properly on 10.3 as a client. Standard configuration via Yast was used. password change via kpasswd works perfectly. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.