Re: Forcing password change after password expiration

[George <jirka 5z com>]

On Mon, Aug 25, 2003 at 07:32:17AM -0400, Mason, Benjamin wrote:
> Is it true that GDM does not support forcing the user to change their
> expired password upon logon? If it's true, is there a workaround? If not,
> how do I do this?

It is not true.  GDM DOES support this.  You have to be using PAM though.  If
you don't use PAM then you are out of luck.  PAM is really the way to go, no
matter how broken PAM is, it is the only way to support all this sanely.  PAM
can really do any sort of account management for you that you need, not just
changing passwords.  I really don't care about adding a whole bunch of random
code to gdm just to support non-pam systems well.  The current support for
crypt and shadow in GDM is so that people on such systems can log in, and
nothing fancy beyond that.  All such fancy code belongs in PAM, not in GDM.

George

-- 
George <jirka 5z com>
   Although prepared for martyrdom, I preferred that it be postponed.
                       -- Sir Winston Churchill