Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Kerberos 5

Status
Not open for further replies.

bdw238

MIS
Dec 15, 2005
52
0
0
GB
Hello,

I am currently in process of designing a Kerberos 5 single sign on for are 15 PSeries Servers. I would like some advice on how to capture the "3004-333 A password change is required" in a script, so that I can I force a password change on a user before they receive a shell prompt, see below


login: kbtest4
kbtest4's Password:
[KRB5files]: 3004-332 Your password has expired.
3004-333 A password change is required.
2 unsuccessful login attempts since last login.
Last unsuccessful login: Thu 23 Mar 10:40:11 2006 on /dev/pts/8 from 10.0.4.155
Last login: Thu 23 Mar 10:38:57 2006 on /dev/pts/8 from 10.0.4.155

[testserver]: /home/kbtest4 $

Currently the Kerberos authentication complains, and gives the user a shell prompt.

Therefore,

How can I force a password change using kpasswd on ?
capturing the "A Password Change..etc" from the Kerberos authentication module (assuming this is creating the message here!!)?

The OS Versions and Software used:

Krb5.client and KRB5.server from The Aix 5.2 & 5.3 Expansion pack.
OS: Aix 5.2 and 5.3

Regards

Brian
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top