Changing this to: account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so
Seems to work, but I'm worried about side-effects of using "done" here. Is this a bug in pam_unix? new_authtok_reqd=ok doesn't work. -- passwd -e locks account https://bugs.launchpad.net/bugs/291091 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs