[sudo-users] Running passwd problems

[Russell Van Tassell]

On Wed, Nov 09, 2005 at 03:21:47PM -0000, EWAD SCM wrote:
> Hello all,
> 
>     I currently have a problem with using the passwd command in conjunction with sudo. We run a Solaris 2.6 installation that we currently log onto as a job specific user eg. plummer, electrician or carpenter. For security reasons we now have to log on as an individual user eg. John, Paul etc and then we use SUDO to change the users account to plummer, electrician or carpenter. The problem we have is that every users individual password needs to be changed every 3 months and if they run the passwd command it changes the password of plummer, electrician or carpenter, where I need it to change it for John. Any suggestions will be greatly appreciated thanks Martin.

If you expire the main password, doesn't it successfully force you to
change it before you execute the "sudo" command to switch to the correct
user?  I assume there there are reasons that the users have to "become"
the generic user rather than just using sudo to execute individual
commands as that user?  In short, from your description there sounds
like there is a window in there where you could force the user to change
their password without affecting the generic username (which I assume is
probably a locked account, anyway).  Hope that helps...

-- 
Russell M. Van Tassell
russell at loosenut.com

"For every action there is an equal and opposite government program."