*BSD News Article 34639


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!harbinger.cc.monash.edu.au!yeshua.marcam.com!usc!howland.reston.ans.net!agate!asami
From: asami@cs.berkeley.edu (Satoshi ASAMI)
Newsgroups: comp.os.386bsd.questions
Subject: Re: no password
Date: 20 Aug 1994 09:05:11 GMT
Organization: CS Div. - EECS, The University of California, Berkeley, CA 94720
Lines: 18
Message-ID: <ASAMI.94Aug20020512@forgery.cs.berkeley.edu>
References: <0iIyPve00WB58xq0IR@andrew.cmu.edu>
NNTP-Posting-Host: forgery.cs.berkeley.edu
In-reply-to: Timothy J Kniveton's message of Thu, 18 Aug 1994 14:55:55 PST

In article <0iIyPve00WB58xq0IR@andrew.cmu.edu>
        Timothy J Kniveton <tim+@CMU.EDU> writes:

 * when i create an account, if the person isn't physically there, i
 * leave their pw blank for them to set.  this obviously creates some
 * security problems, especially if they leave it blank.  does anyone
 * have a good idea how to force a user to set its password?  possibly
 * using the password expiration field in the passwd file..

You can just create it with a "*", and then immediately set it using
"passwd username" (as root) to something totally inconvenient to type
(like "$%QCv',=(*&").  I'm sure that person will change it the first
time she logs in. :)

Satoshi

P.S. If you mean there is no way for you to communicate them their
     initial password, sorry.