From: Jamie C. <jca...@we...> - 2004-08-12 23:32:09
|
On some operating systems (like Solaris), Webmin assumes that if a user has a blank password, he will be prompted for a password at his next SSH / telnet login. Unfortunately, Usermin which does it's own authentication does not know about this, and will always let a user with no password login without a password. I should really fix this by adding an option to Usermin to force users to set a password in this case. It shouldn't be too hard, as the code for changing password if it expires has already been written .. - Jamie On Fri, 2004-08-13 at 00:44, Morris Hooten wrote: > Jamie- > > Yes I have tried that and it allows the user to login to usermin without > a password. If I check the "ask at first login" option it doesn't ask. > > I'm using the most recent versions of webmin and usermin running on > solaris 9. > > How does usermin know when a user has the "forcechange option" flag on? > Is usermin reading a separate file that tags the user besides reading > the /etc/passwd and shadow file ? > > > Thanks > > > > > > > Jamie Cameron wrote: > > On Wed, 2004-08-11 at 01:34, Morris Hooten wrote: > > > >>Is there a way to set the flag to force a new user > >>to change his password at first login when adding > >>users from a batch file or by default for the whole module > >>when adding any single new user without having to manually > >>go in and set the force change option for each user? > > > > > > Have you tried leaving the user's password blank? On operating systems > > that support prompting for a password at first login, this will do the > > job .. > > > > - Jamie > > |