dropbear icon indicating copy to clipboard operation
dropbear copied to clipboard

Does it support password expiration detection?

Open maxiaodong314 opened this issue 3 years ago • 2 comments

After the account password expires, the user must forcibly change the password before continuing to use it.

maxiaodong314 avatar May 08 '22 01:05 maxiaodong314

Checks password expiry for platforms that use shadow passwd files.

maxiaodong314 avatar May 08 '22 01:05 maxiaodong314

Dropbear doesn't currently support it. In the past there have been a few patches such as https://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2016q2/001895.html though I've been reluctant to apply those given forced password-change corporate policies are pretty tedious and don't seem to improve security.

The use case of changing passwords on first use is good though - I'll see if I can get something similar merged for a future release.

mkj avatar May 10 '22 14:05 mkj