On Wed, Nov 06, 2002 at 11:41:19AM +0100, Ulrich Roth wrote:
If I understand correctly, it will show on the screen the passwords you type in, which means the old password once (if you have to type it in) and the new password twice.
Correct. What happens is - you connect to the server - you authenticate as usual; password is not echoed - sshd prints a message "your password has expired, please change it" - the chauthtok function(s) of the PAM stack are called. The default PAM module asks you for - old password - new password - new password for confirmation All of them are visible because sshd doesn't turn off terminal echo. Not a huge problem if you ask me but worth fixing anyway. Cheers, Olaf -- Olaf Kirch | Anyone who has had to work with X.509 has probably okir@suse.de | experienced what can best be described as ---------------+ ISO water torture. -- Peter Gutmann