[Squashman]

I have my login.defs setup to force password changes every 28 days and starts warning my users 7 days in advance.

Now my problem occurs when they wait to the last day and it forces them to change there password. When they logon with there shell client it authenticates and kills the shell client because there authentication tokens have expired. It will not bring up the force password change prompt and I will end up having to reset there password for them.

If the user logs onto the console everything works fine. The password prompt comes up immediately if their password has aged 28 days. But I dont let anyone access the console.

Why wont the forced password change work when a user secure shells into the server?