document/TranslateProject
2
0
Fork 0
mirror of https://github.com/LCTT/TranslateProject.git synced 2026-08-23 04:03:29 +08:00
Code Issues Packages Projects Releases Wiki Activity

translated

Browse Source
This commit is contained in:
geekpi
2015-10-13 09:48:44 +08:00
parent f84e372378
commit cdd9166ed1
2 changed files with 55 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files

56
sources/tech/20151012 Linux FAQs with Answers--How to force password change at the next login on Linux.md
View File

@@ -1,56 +0,0 @@
translating----geekpi
Linux FAQs with Answers--How to force password change at the next login on Linux
================================================================================
> **Question**: I manage a Linux server for multiple users to share. I have just created a new user account with some default password, and I want the user to change the default password immediately after the first login. Is there a way to force a user to change his/her password at the next login?
In multi-user Linux environment, it's a standard practice to create user accounts with some random default password. Then after a successful login, a new user can change the default password to his or her own. For security reasons, it is often recommended to "force" users to change the default password after the first login to make sure that the initial one-time password is no longer used.
Here is **how to force a user to change his or her password on the next login**.
Every user account in Linux is associated with various password-related configurations and information. For example, it remembers the date of the last password change, the minimum/maximum number of days between password changes, and when to expire the current password, etc.
A command-line tool called chage can access and adjust password expiration related configurations. You can use this tool to force password change of any user at the next login.
To view password expiration information of a particular user (e.g., alice), run the following command. Note that you need root privilege only when you are checking password age information of any other user than yourself.
$ sudo chage -l alice
![](https://c1.staticflickr.com/1/727/21955581605_5471e61ee0_c.jpg)
### Force Password Change for a User ###
If you want to force a user to change his or her password, use the following command.
$ sudo chage -d0 <user-name>
Originally the "-d <N>" option is supposed to set the "age" of a password (in terms of the number of days since January 1st, 1970 when the password was last changed). So "-d0" indicates that the password was changed on January 1st, 1970, which essentially expires the current password, and causes it to be changed on the next login.
Another way to expire the current password is via passwd command.
$ sudo passwd -e <user-name>
The above command has the same effect of "chage -d0", making the current password of the user expire immediately.
Now check the password information of the user again, and you will see:
![](https://c2.staticflickr.com/6/5770/21767501480_ba88f00d80_c.jpg)
When you log in again, you will be asked to change the password. You will need to verify the current password one more time before the change.
![](https://c2.staticflickr.com/6/5835/21929638636_eed4d69cb9_c.jpg)
To set more comprehensive password policies (e.g., password complexity, reuse prevention), you can use PAM. See [the article][1] for more detail.
--------------------------------------------------------------------------------
via: http://ask.xmodulo.com/force-password-change-next-login-linux.html
作者：[Dan Nanni][a]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]:http://ask.xmodulo.com/author/nanni
[1]:http://xmodulo.com/set-password-policy-linux.html

55
translated/tech/20151012 Linux FAQs with Answers--How to force password change at the next login on Linux.md Normal file
View File

@@ -0,0 +1,55 @@
Linux有问必答--如何强制在下次登录Linux时更换密码
================================================================================
> **提问**：我管理着一台多人共享的Linux服务器。我刚使用默认密码创建了一个新用户，但是我想用户在第一次登录时更换密码。有没有什么方法可以让他/她在下次登录时修改密码呢？
在多用户Linux环境中，标准实践是使用一个默认的随机密码创建一个用户账户。成功登录后，新用户自己改变默认密码。出于安全里有，经常建议“强制”用户在第一次登录时修改密码来确保这个一次性使用的密码不会再被使用。
下面是**如何强制用户在下次登录时修改他/她的密码**。
changes, and when to expire the current password, etc.
每个Linux用户都关联这不同的密码相关配置和信息。比如，记录着上次密码更改的日期、最小/最大的修改密码的天数、密码何时过期等等。
一个叫chage的命令行工具可以访问并调整密码过期相关配置。你可以使用这个工具来强制用户在下次登录修改密码、
要查看特定用户的过期信息（比如：alice），运行下面的命令。注意的是除了你自己之外查看其他任何用户的密码信息都需要root权限。
$ sudo chage -l alice
![](https://c1.staticflickr.com/1/727/21955581605_5471e61ee0_c.jpg)
### 强制用户修改密码 ###
如果你想要强制用户去修改他/她的密码,使用下面的命令。
$ sudo chage -d0 <user-name>
原本“-d <N>”参数是用来设置密码的“年龄”（也就是上次修改密码起到1970 1.1起的天数）。因此“-d0”的意思是上次密码修改的时间是1970 1.1，这就让当前的密码过期了，也就强制让他在下次登录的时候修改密码了。
另外一个过期当前密码的方式是用passwd命令。
$ sudo passwd -e <user-name>
上面的命令和“chage -d0”作用一样，让当前用户的密码立即过期。
现在检查用户的信息，你会发现：
![](https://c2.staticflickr.com/6/5770/21767501480_ba88f00d80_c.jpg)
当你再次登录时候，你会被要求修改密码。你会在修改前被要求再验证一次当前密码。
![](https://c2.staticflickr.com/6/5835/21929638636_eed4d69cb9_c.jpg)
要设置更全面的密码策略（如密码复杂性，防止重复使用），则可以使用PAM。参见[这篇文章][1]了解更多详情。
--------------------------------------------------------------------------------
via: http://ask.xmodulo.com/force-password-change-next-login-linux.html
作者：[Dan Nanni][a]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]:http://ask.xmodulo.com/author/nanni
[1]:http://xmodulo.com/set-password-policy-linux.html