Forcing new users to change their password on first login

2010-05-02 13:40

2010-05-02 13:47

One interesting feature in Active Directory, is the ability to create a new user with an expired password, and thus force the user to diff --git a/blog/Fransk_idiotlovforslag_hinker_gjennom_parlamentet.html b/blog/Fransk_idiotlovforslag_hinker_gjennom_parlamentet.html index 1f3a4f6b1b..bad08b6b8d 100644 --- a/blog/Fransk_idiotlovforslag_hinker_gjennom_parlamentet.html +++ b/blog/Fransk_idiotlovforslag_hinker_gjennom_parlamentet.html @@ -62,6 +62,8 @@ rettet mot seg.

April (3)

May (1)

2009 @@ -117,9 +119,9 @@ rettet mot seg.

@@ -135,7 +137,7 @@ rettet mot seg.

diff --git a/blog/Fri_og___pen_standard__slik_Digistan_ser_det.html b/blog/Fri_og___pen_standard__slik_Digistan_ser_det.html index 0fc4d89c67..194d74e39a 100644 --- a/blog/Fri_og___pen_standard__slik_Digistan_ser_det.html +++ b/blog/Fri_og___pen_standard__slik_Digistan_ser_det.html @@ -98,6 +98,8 @@ produkter basert pÃ¥ standarden.

April (3)

May (1)

2009 @@ -153,9 +155,9 @@ produkter basert pÃ¥ standarden.

@@ -171,7 +173,7 @@ produkter basert pÃ¥ standarden.

diff --git a/blog/Frikanalen_og_jul_i_studentr__det.html b/blog/Frikanalen_og_jul_i_studentr__det.html index 8041b68798..b79c20b1b4 100644 --- a/blog/Frikanalen_og_jul_i_studentr__det.html +++ b/blog/Frikanalen_og_jul_i_studentr__det.html @@ -86,6 +86,8 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

April (3)

May (1)

2009 @@ -141,9 +143,9 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

@@ -159,7 +161,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

diff --git a/blog/Great_book___Content__Selected_Essays_on_Technology__Creativity__Copyright__and_the_Future_of_the_Future_.html b/blog/Great_book___Content__Selected_Essays_on_Technology__Creativity__Copyright__and_the_Future_of_the_Future_.html index 42e24617f6..5f1d87618f 100644 --- a/blog/Great_book___Content__Selected_Essays_on_Technology__Creativity__Copyright__and_the_Future_of_the_Future_.html +++ b/blog/Great_book___Content__Selected_Essays_on_Technology__Creativity__Copyright__and_the_Future_of_the_Future_.html @@ -59,6 +59,8 @@ strongly recommend this book.

April (3)

May (1)

2009 @@ -114,9 +116,9 @@ strongly recommend this book.

@@ -132,7 +134,7 @@ strongly recommend this book.

diff --git a/blog/Hva_er_egentlig_en___pen_standard_.html b/blog/Hva_er_egentlig_en___pen_standard_.html index 186390fd08..918173919d 100644 --- a/blog/Hva_er_egentlig_en___pen_standard_.html +++ b/blog/Hva_er_egentlig_en___pen_standard_.html @@ -145,6 +145,8 @@ av en standard for at en standard skal kunne kalles fri og Ã¥pen.

April (3)

May (1)

2009 @@ -200,9 +202,9 @@ av en standard for at en standard skal kunne kalles fri og Ã¥pen.

@@ -218,7 +220,7 @@ av en standard for at en standard skal kunne kalles fri og Ã¥pen.

diff --git a/blog/Hvor_flyter_Microsofts_penger_.html b/blog/Hvor_flyter_Microsofts_penger_.html index 90bc37f5ef..ba65fbe0e5 100644 --- a/blog/Hvor_flyter_Microsofts_penger_.html +++ b/blog/Hvor_flyter_Microsofts_penger_.html @@ -72,6 +72,8 @@ om spaniaselskapet pÃ¥ spansk, men jeg kan ikke lese spansk. :(

April (3)

May (1)

2009 @@ -127,9 +129,9 @@ om spaniaselskapet pÃ¥ spansk, men jeg kan ikke lese spansk. :(

@@ -145,7 +147,7 @@ om spaniaselskapet pÃ¥ spansk, men jeg kan ikke lese spansk. :(

diff --git a/blog/Hvorfor_jeg_ikke_bruker_eFaktura.html b/blog/Hvorfor_jeg_ikke_bruker_eFaktura.html index 8d300ba5c7..dfd81ce054 100644 --- a/blog/Hvorfor_jeg_ikke_bruker_eFaktura.html +++ b/blog/Hvorfor_jeg_ikke_bruker_eFaktura.html @@ -75,6 +75,8 @@ liker rett og slett ikke dagens faktureringsmodeller.

April (3)

May (1)

2009 @@ -130,9 +132,9 @@ liker rett og slett ikke dagens faktureringsmodeller.

@@ -148,7 +150,7 @@ liker rett og slett ikke dagens faktureringsmodeller.

diff --git a/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html b/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html index 652fd9be79..7064bb8b3e 100644 --- a/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html +++ b/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html @@ -55,6 +55,8 @@ bakgrunnskunnskapen kan jeg godt tro at IDG er inne pÃ¥ noe.

April (3)

May (1)

2009 @@ -110,9 +112,9 @@ bakgrunnskunnskapen kan jeg godt tro at IDG er inne pÃ¥ noe.

@@ -128,7 +130,7 @@ bakgrunnskunnskapen kan jeg godt tro at IDG er inne pÃ¥ noe.

diff --git a/blog/ISO_still_hope_to_fix_OOXML.html b/blog/ISO_still_hope_to_fix_OOXML.html index c4137336e1..7abb6630d5 100644 --- a/blog/ISO_still_hope_to_fix_OOXML.html +++ b/blog/ISO_still_hope_to_fix_OOXML.html @@ -62,6 +62,8 @@ seminar this autumn.

April (3)

May (1)

2009 @@ -117,9 +119,9 @@ seminar this autumn.

@@ -135,7 +137,7 @@ seminar this autumn.

diff --git a/blog/Intellektuelt_privilegium___et_bedre_IP_begrep.html b/blog/Intellektuelt_privilegium___et_bedre_IP_begrep.html index 7c4cd94db1..494a705bf5 100644 --- a/blog/Intellektuelt_privilegium___et_bedre_IP_begrep.html +++ b/blog/Intellektuelt_privilegium___et_bedre_IP_begrep.html @@ -67,6 +67,8 @@ forretningshemmeligheter framover.

April (3)

May (1)

2009 @@ -122,9 +124,9 @@ forretningshemmeligheter framover.

@@ -140,7 +142,7 @@ forretningshemmeligheter framover.

diff --git a/blog/Internet_leverand__rer_er_ikke_vokterne_av_sine_kunders_nettbruk.html b/blog/Internet_leverand__rer_er_ikke_vokterne_av_sine_kunders_nettbruk.html index d01a5df83e..f3b995ce34 100644 --- a/blog/Internet_leverand__rer_er_ikke_vokterne_av_sine_kunders_nettbruk.html +++ b/blog/Internet_leverand__rer_er_ikke_vokterne_av_sine_kunders_nettbruk.html @@ -71,6 +71,8 @@ publiseres med mer brukervennlige vilkÃ¥r, som CC-BY og lignende.

April (3)

May (1)

2009 @@ -126,9 +128,9 @@ publiseres med mer brukervennlige vilkÃ¥r, som CC-BY og lignende.

@@ -144,7 +146,7 @@ publiseres med mer brukervennlige vilkÃ¥r, som CC-BY og lignende.

diff --git a/blog/Internet_sensur_skal_i_retten_p___mandag.html b/blog/Internet_sensur_skal_i_retten_p___mandag.html index 90d01723d0..4cf6fe0a96 100644 --- a/blog/Internet_sensur_skal_i_retten_p___mandag.html +++ b/blog/Internet_sensur_skal_i_retten_p___mandag.html @@ -72,6 +72,8 @@ bruk av musikk.

April (3)

May (1)

2009 @@ -127,9 +129,9 @@ bruk av musikk.

@@ -145,7 +147,7 @@ bruk av musikk.

diff --git a/blog/Jeg_vil_beholde_tusenlappen___jeg_bruker_den.html b/blog/Jeg_vil_beholde_tusenlappen___jeg_bruker_den.html index 4647167055..352d799b7e 100644 --- a/blog/Jeg_vil_beholde_tusenlappen___jeg_bruker_den.html +++ b/blog/Jeg_vil_beholde_tusenlappen___jeg_bruker_den.html @@ -96,6 +96,8 @@ kontanter for noen dager siden.

April (3)

May (1)

2009 @@ -151,9 +153,9 @@ kontanter for noen dager siden.

@@ -169,7 +171,7 @@ kontanter for noen dager siden.

diff --git a/blog/Jeg_vil_ikke_ha_BankID.html b/blog/Jeg_vil_ikke_ha_BankID.html index ffb8277e6e..db8014f2af 100644 --- a/blog/Jeg_vil_ikke_ha_BankID.html +++ b/blog/Jeg_vil_ikke_ha_BankID.html @@ -130,6 +130,8 @@ nettbankkontroll over egne midler. :(

April (3)

May (1)

2009 @@ -185,9 +187,9 @@ nettbankkontroll over egne midler. :(

@@ -203,7 +205,7 @@ nettbankkontroll over egne midler. :(

diff --git a/blog/Kart_over_overv__kningskamera_i_Norge.html b/blog/Kart_over_overv__kningskamera_i_Norge.html index d3eab85983..1150ea4070 100644 --- a/blog/Kart_over_overv__kningskamera_i_Norge.html +++ b/blog/Kart_over_overv__kningskamera_i_Norge.html @@ -65,6 +65,8 @@ automatisk over i spesialkartet.

April (3)

May (1)

2009 @@ -120,9 +122,9 @@ automatisk over i spesialkartet.

@@ -138,7 +140,7 @@ automatisk over i spesialkartet.

diff --git a/blog/Kartverket__frigj__r__data_men_er_fortsatt_ikke_interessante.html b/blog/Kartverket__frigj__r__data_men_er_fortsatt_ikke_interessante.html index 1e09fd6964..53f34bf365 100644 --- a/blog/Kartverket__frigj__r__data_men_er_fortsatt_ikke_interessante.html +++ b/blog/Kartverket__frigj__r__data_men_er_fortsatt_ikke_interessante.html @@ -78,6 +78,8 @@ er ubrukelig til dette.

April (3)

May (1)

2009 @@ -133,9 +135,9 @@ er ubrukelig til dette.

@@ -151,7 +153,7 @@ er ubrukelig til dette.

diff --git a/blog/Kerberos_for_Debian_Edu_Squeeze_.html b/blog/Kerberos_for_Debian_Edu_Squeeze_.html index a7a24083e3..38eab139a9 100644 --- a/blog/Kerberos_for_Debian_Edu_Squeeze_.html +++ b/blog/Kerberos_for_Debian_Edu_Squeeze_.html @@ -83,6 +83,8 @@ up in a few days.

April (3)

May (1)

2009 @@ -138,9 +140,9 @@ up in a few days.

@@ -156,7 +158,7 @@ up in a few days.

diff --git a/blog/Korrupsjon_p___h__yeste_niv___.html b/blog/Korrupsjon_p___h__yeste_niv___.html index c205ea3c4e..0cb6694f57 100644 --- a/blog/Korrupsjon_p___h__yeste_niv___.html +++ b/blog/Korrupsjon_p___h__yeste_niv___.html @@ -63,6 +63,8 @@ Sverige blir sÃ¸ndagskolefortellinger i sammenligning.

April (3)

May (1)

2009 @@ -118,9 +120,9 @@ Sverige blir sÃ¸ndagskolefortellinger i sammenligning.

@@ -136,7 +138,7 @@ Sverige blir sÃ¸ndagskolefortellinger i sammenligning.

diff --git a/blog/Kryptert_harddisk___naturligvis.html b/blog/Kryptert_harddisk___naturligvis.html index d9e31f760a..7907931ea5 100644 --- a/blog/Kryptert_harddisk___naturligvis.html +++ b/blog/Kryptert_harddisk___naturligvis.html @@ -76,6 +76,8 @@ betydelige.

April (3)

May (1)

2009 @@ -131,9 +133,9 @@ betydelige.

@@ -149,7 +151,7 @@ betydelige.

diff --git a/blog/Lenker_samlet_2009_05_09.html b/blog/Lenker_samlet_2009_05_09.html index 913816c4cd..80fac90eb6 100644 --- a/blog/Lenker_samlet_2009_05_09.html +++ b/blog/Lenker_samlet_2009_05_09.html @@ -65,6 +65,8 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

April (3)

May (1)

2009 @@ -120,9 +122,9 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

@@ -138,7 +140,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

diff --git a/blog/Lisensvalg_for_NUUG_opptakene_endelig_p___plass.html b/blog/Lisensvalg_for_NUUG_opptakene_endelig_p___plass.html index c405056f23..12d24be474 100644 --- a/blog/Lisensvalg_for_NUUG_opptakene_endelig_p___plass.html +++ b/blog/Lisensvalg_for_NUUG_opptakene_endelig_p___plass.html @@ -56,6 +56,8 @@ i denne sammenhengen.

April (3)

May (1)

2009 @@ -111,9 +113,9 @@ i denne sammenhengen.

@@ -129,7 +131,7 @@ i denne sammenhengen.

diff --git a/blog/Litt_om_valgfusk_og_problemet_med_elektronisk_stemmegiving.html b/blog/Litt_om_valgfusk_og_problemet_med_elektronisk_stemmegiving.html index 3feedea30a..75d977c7ff 100644 --- a/blog/Litt_om_valgfusk_og_problemet_med_elektronisk_stemmegiving.html +++ b/blog/Litt_om_valgfusk_og_problemet_med_elektronisk_stemmegiving.html @@ -76,6 +76,8 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

April (3)

May (1)

2009 @@ -131,9 +133,9 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

@@ -149,7 +151,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

diff --git a/blog/MVA_p___b__ker_med_DRM__ikke_MVA_p___b__ker_uten_DRM_.html b/blog/MVA_p___b__ker_med_DRM__ikke_MVA_p___b__ker_uten_DRM_.html index fdeeb63aa9..deb130db56 100644 --- a/blog/MVA_p___b__ker_med_DRM__ikke_MVA_p___b__ker_uten_DRM_.html +++ b/blog/MVA_p___b__ker_med_DRM__ikke_MVA_p___b__ker_uten_DRM_.html @@ -65,6 +65,8 @@ DRM mÃ¥ anses som et kjÃ¸p.

April (3)

May (1)

2009 @@ -120,9 +122,9 @@ DRM mÃ¥ anses som et kjÃ¸p.

@@ -138,7 +140,7 @@ DRM mÃ¥ anses som et kjÃ¸p.

diff --git a/blog/Massiv_overv__kning_av_kollektivtrafikken_i_Oslo_planlegges.html b/blog/Massiv_overv__kning_av_kollektivtrafikken_i_Oslo_planlegges.html index d921321a23..fb2eb706c0 100644 --- a/blog/Massiv_overv__kning_av_kollektivtrafikken_i_Oslo_planlegges.html +++ b/blog/Massiv_overv__kning_av_kollektivtrafikken_i_Oslo_planlegges.html @@ -59,6 +59,8 @@ OsloomrÃ¥det.

April (3)

May (1)

2009 @@ -114,9 +116,9 @@ OsloomrÃ¥det.

@@ -132,7 +134,7 @@ OsloomrÃ¥det.

diff --git a/blog/Mekanikk_delen_av_reprap_byggesettet_i_hus.html b/blog/Mekanikk_delen_av_reprap_byggesettet_i_hus.html index 92453f60cb..3a4e334bd0 100644 --- a/blog/Mekanikk_delen_av_reprap_byggesettet_i_hus.html +++ b/blog/Mekanikk_delen_av_reprap_byggesettet_i_hus.html @@ -64,6 +64,8 @@ og kan melde seg pÃ¥ aktive@nuug.no.

April (3)

May (1)

2009 @@ -119,9 +121,9 @@ og kan melde seg pÃ¥ aktive@nuug.no.

@@ -137,7 +139,7 @@ og kan melde seg pÃ¥ aktive@nuug.no.

diff --git a/blog/Mekanikk_delen_av_reprap_byggesettet_p___vei.html b/blog/Mekanikk_delen_av_reprap_byggesettet_p___vei.html index 4265d8ca23..6d99fe3626 100644 --- a/blog/Mekanikk_delen_av_reprap_byggesettet_p___vei.html +++ b/blog/Mekanikk_delen_av_reprap_byggesettet_p___vei.html @@ -56,6 +56,8 @@ bort fÃ¸rste pakke.

April (3)

May (1)

2009 @@ -111,9 +113,9 @@ bort fÃ¸rste pakke.

@@ -129,7 +131,7 @@ bort fÃ¸rste pakke.

diff --git a/blog/Mens_vi_venter_p___3D_skriveren.html b/blog/Mens_vi_venter_p___3D_skriveren.html index af11d70165..702e5ab027 100644 --- a/blog/Mens_vi_venter_p___3D_skriveren.html +++ b/blog/Mens_vi_venter_p___3D_skriveren.html @@ -68,6 +68,8 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

April (3)

May (1)

2009 @@ -123,9 +125,9 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -141,7 +143,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

diff --git a/blog/Microsofts_misvisende_argumentasjon_rundt_multimediaformater.html b/blog/Microsofts_misvisende_argumentasjon_rundt_multimediaformater.html index f0f72aa89b..3904285814 100644 --- a/blog/Microsofts_misvisende_argumentasjon_rundt_multimediaformater.html +++ b/blog/Microsofts_misvisende_argumentasjon_rundt_multimediaformater.html @@ -88,6 +88,8 @@ misvisende pÃ¥stander etter i sÃ¸mmene.

April (3)

May (1)

2009 @@ -143,9 +145,9 @@ misvisende pÃ¥stander etter i sÃ¸mmene.

@@ -161,7 +163,7 @@ misvisende pÃ¥stander etter i sÃ¸mmene.

diff --git a/blog/Min_reprap_tar_sakte_form.html b/blog/Min_reprap_tar_sakte_form.html index d8fedb77cc..659c11c5b2 100644 --- a/blog/Min_reprap_tar_sakte_form.html +++ b/blog/Min_reprap_tar_sakte_form.html @@ -78,6 +78,8 @@ arbeidet.

April (3)

May (1)

2009 @@ -133,9 +135,9 @@ arbeidet.

@@ -151,7 +153,7 @@ arbeidet.

diff --git a/blog/Nasjonalbiblioteket_legger_ut_b__ker_p___web.html b/blog/Nasjonalbiblioteket_legger_ut_b__ker_p___web.html index cb56c547fa..fd8423689d 100644 --- a/blog/Nasjonalbiblioteket_legger_ut_b__ker_p___web.html +++ b/blog/Nasjonalbiblioteket_legger_ut_b__ker_p___web.html @@ -73,6 +73,8 @@ fortlÃ¸pende.

April (3)

May (1)

2009 @@ -128,9 +130,9 @@ fortlÃ¸pende.

@@ -146,7 +148,7 @@ fortlÃ¸pende.

diff --git a/blog/No_patch_is_not_better_than_a_useless_patch.html b/blog/No_patch_is_not_better_than_a_useless_patch.html index bbfd8fd125..6a5cb71d4f 100644 --- a/blog/No_patch_is_not_better_than_a_useless_patch.html +++ b/blog/No_patch_is_not_better_than_a_useless_patch.html @@ -54,6 +54,8 @@ properties.

April (3)

May (1)

2009 @@ -109,9 +111,9 @@ properties.

@@ -127,7 +129,7 @@ properties.

diff --git a/blog/Norge_trenger_en_personvernforening.html b/blog/Norge_trenger_en_personvernforening.html index 1663dce908..3070efcca6 100644 --- a/blog/Norge_trenger_en_personvernforening.html +++ b/blog/Norge_trenger_en_personvernforening.html @@ -60,6 +60,8 @@ nÃ¥ fÃ¥r vi se om noen er enig.

April (3)

May (1)

2009 @@ -115,9 +117,9 @@ nÃ¥ fÃ¥r vi se om noen er enig.

@@ -133,7 +135,7 @@ nÃ¥ fÃ¥r vi se om noen er enig.

diff --git a/blog/ODF_bruk_i_staten__ikke_helt_p___plass.html b/blog/ODF_bruk_i_staten__ikke_helt_p___plass.html index 5b9436a133..a34946685a 100644 --- a/blog/ODF_bruk_i_staten__ikke_helt_p___plass.html +++ b/blog/ODF_bruk_i_staten__ikke_helt_p___plass.html @@ -60,6 +60,8 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

April (3)

May (1)

2009 @@ -115,9 +117,9 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

@@ -133,7 +135,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

diff --git a/blog/Opphavet_til_Skolelinux_prosjektet.html b/blog/Opphavet_til_Skolelinux_prosjektet.html index 07dbe1b169..e0fd0c30e5 100644 --- a/blog/Opphavet_til_Skolelinux_prosjektet.html +++ b/blog/Opphavet_til_Skolelinux_prosjektet.html @@ -75,6 +75,8 @@ Resten er historie. :)

April (3)

May (1)

2009 @@ -130,9 +132,9 @@ Resten er historie. :)

@@ -148,7 +150,7 @@ Resten er historie. :)

diff --git a/blog/P___vegne_av_vanvitting_mange__Aftenposten_.html b/blog/P___vegne_av_vanvitting_mange__Aftenposten_.html index c500317385..6ee4ca4b07 100644 --- a/blog/P___vegne_av_vanvitting_mange__Aftenposten_.html +++ b/blog/P___vegne_av_vanvitting_mange__Aftenposten_.html @@ -57,6 +57,8 @@ Hr. Fossen. MÃ¥ innrÃ¸mme at jeg tviler pÃ¥ det.

April (3)

May (1)

2009 @@ -112,9 +114,9 @@ Hr. Fossen. MÃ¥ innrÃ¸mme at jeg tviler pÃ¥ det.

@@ -130,7 +132,7 @@ Hr. Fossen. MÃ¥ innrÃ¸mme at jeg tviler pÃ¥ det.

diff --git a/blog/Recording_video_from_cron_using_VLC.html b/blog/Recording_video_from_cron_using_VLC.html index b62c7abbce..9f30696bd1 100644 --- a/blog/Recording_video_from_cron_using_VLC.html +++ b/blog/Recording_video_from_cron_using_VLC.html @@ -84,6 +84,8 @@ wait $pid

April (3)

May (1)

2009 @@ -139,9 +141,9 @@ wait $pid

@@ -157,7 +159,7 @@ wait $pid

diff --git a/blog/Regjerningen_forlater_prinsippet_om_ingen_royalty_betaling_i_standardkatalogen_versjon_2.html b/blog/Regjerningen_forlater_prinsippet_om_ingen_royalty_betaling_i_standardkatalogen_versjon_2.html index a6b89b4b0d..176015b14d 100644 --- a/blog/Regjerningen_forlater_prinsippet_om_ingen_royalty_betaling_i_standardkatalogen_versjon_2.html +++ b/blog/Regjerningen_forlater_prinsippet_om_ingen_royalty_betaling_i_standardkatalogen_versjon_2.html @@ -76,6 +76,8 @@ hÃ¸ringsuttalelse, men ser ut til Ã¥ ha blitt ignorert.

April (3)

May (1)

2009 @@ -131,9 +133,9 @@ hÃ¸ringsuttalelse, men ser ut til Ã¥ ha blitt ignorert.

@@ -149,7 +151,7 @@ hÃ¸ringsuttalelse, men ser ut til Ã¥ ha blitt ignorert.

diff --git a/blog/Regjerningens_oppsummering_av_h__ringen_om_standardkatalogen_versjon_2.html b/blog/Regjerningens_oppsummering_av_h__ringen_om_standardkatalogen_versjon_2.html index e4f37e2528..507fe5a4ae 100644 --- a/blog/Regjerningens_oppsummering_av_h__ringen_om_standardkatalogen_versjon_2.html +++ b/blog/Regjerningens_oppsummering_av_h__ringen_om_standardkatalogen_versjon_2.html @@ -67,6 +67,8 @@ politidirektoratet om patentproblemer i Theora).

April (3)

May (1)

2009 @@ -122,9 +124,9 @@ politidirektoratet om patentproblemer i Theora).

@@ -140,7 +142,7 @@ politidirektoratet om patentproblemer i Theora).

diff --git a/blog/Relative_popularity_of_document_formats__MS_Office_vs__ODF_.html b/blog/Relative_popularity_of_document_formats__MS_Office_vs__ODF_.html index 80cf0c6dda..7da9e052e4 100644 --- a/blog/Relative_popularity_of_document_formats__MS_Office_vs__ODF_.html +++ b/blog/Relative_popularity_of_document_formats__MS_Office_vs__ODF_.html @@ -96,6 +96,8 @@ numbers.

April (3)

May (1)

2009 @@ -151,9 +153,9 @@ numbers.

@@ -169,7 +171,7 @@ numbers.

diff --git a/blog/Reprap_bygging_i_p__sken.html b/blog/Reprap_bygging_i_p__sken.html index cfcb37c395..ac554f4884 100644 --- a/blog/Reprap_bygging_i_p__sken.html +++ b/blog/Reprap_bygging_i_p__sken.html @@ -100,6 +100,8 @@ kommer til Ã¥ bruke denne plasttypen som hÃ¥ndterer temperaturer mellom

April (3)

May (1)

2009 @@ -155,9 +157,9 @@ kommer til Ã¥ bruke denne plasttypen som hÃ¥ndterer temperaturer mellom

@@ -173,7 +175,7 @@ kommer til Ã¥ bruke denne plasttypen som hÃ¥ndterer temperaturer mellom

diff --git a/blog/Reprap_pakke_tapt_i_posten.html b/blog/Reprap_pakke_tapt_i_posten.html index 7426fe6ac0..3cb05cd38c 100644 --- a/blog/Reprap_pakke_tapt_i_posten.html +++ b/blog/Reprap_pakke_tapt_i_posten.html @@ -56,6 +56,8 @@ lenge alt er klart til Go Open

April (3)

May (1)

2009 @@ -111,9 +113,9 @@ lenge alt er klart til Go Open

@@ -129,7 +131,7 @@ lenge alt er klart til Go Open

diff --git a/blog/Returning_from_Skolelinux_developer_gathering.html b/blog/Returning_from_Skolelinux_developer_gathering.html index de45ac2a20..d22473e9ea 100644 --- a/blog/Returning_from_Skolelinux_developer_gathering.html +++ b/blog/Returning_from_Skolelinux_developer_gathering.html @@ -62,6 +62,8 @@ now. :)

April (3)

May (1)

2009 @@ -117,9 +119,9 @@ now. :)

@@ -135,7 +137,7 @@ now. :)

diff --git a/blog/Sikkerhet__teater__og_hvordan_gj__re_verden_sikrere.html b/blog/Sikkerhet__teater__og_hvordan_gj__re_verden_sikrere.html index 07472aca2e..0e3598401d 100644 --- a/blog/Sikkerhet__teater__og_hvordan_gj__re_verden_sikrere.html +++ b/blog/Sikkerhet__teater__og_hvordan_gj__re_verden_sikrere.html @@ -58,6 +58,8 @@ pÃ¥ flyplassene.

April (3)

May (1)

2009 @@ -113,9 +115,9 @@ pÃ¥ flyplassene.

@@ -131,7 +133,7 @@ pÃ¥ flyplassene.

diff --git a/blog/Sikkerhet_til_sj__s_trenger_sj__kart_uten_bruksbegresninger.html b/blog/Sikkerhet_til_sj__s_trenger_sj__kart_uten_bruksbegresninger.html index 09c35f6ae0..32517987e8 100644 --- a/blog/Sikkerhet_til_sj__s_trenger_sj__kart_uten_bruksbegresninger.html +++ b/blog/Sikkerhet_til_sj__s_trenger_sj__kart_uten_bruksbegresninger.html @@ -100,6 +100,8 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

April (3)

May (1)

2009 @@ -155,9 +157,9 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

@@ -173,7 +175,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

diff --git a/blog/Software_video_mixer_on_a_USB_stick.html b/blog/Software_video_mixer_on_a_USB_stick.html index 1fe36ecbe3..911b5dd80e 100644 --- a/blog/Software_video_mixer_on_a_USB_stick.html +++ b/blog/Software_video_mixer_on_a_USB_stick.html @@ -71,6 +71,8 @@ larger stick as well.

April (3)

May (1)

2009 @@ -126,9 +128,9 @@ larger stick as well.

@@ -144,7 +146,7 @@ larger stick as well.

diff --git a/blog/Standarder_fungerer_best_n__r_en_samler_seg_rundt_dem.html b/blog/Standarder_fungerer_best_n__r_en_samler_seg_rundt_dem.html index bafca683f0..8bcc6815cc 100644 --- a/blog/Standarder_fungerer_best_n__r_en_samler_seg_rundt_dem.html +++ b/blog/Standarder_fungerer_best_n__r_en_samler_seg_rundt_dem.html @@ -60,6 +60,8 @@ bidrar positivt.

April (3)

May (1)

2009 @@ -115,9 +117,9 @@ bidrar positivt.

@@ -133,7 +135,7 @@ bidrar positivt.

diff --git a/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html b/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html index 55755e4884..bc96e3f804 100644 --- a/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html +++ b/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html @@ -72,6 +72,8 @@ application that do not use open network protocol or open formats.

April (3)

May (1)

2009 @@ -127,9 +129,9 @@ application that do not use open network protocol or open formats.

@@ -145,7 +147,7 @@ application that do not use open network protocol or open formats.

diff --git a/blog/Taking_over_sysvinit_development.html b/blog/Taking_over_sysvinit_development.html index a69562cf0f..3dcb679243 100644 --- a/blog/Taking_over_sysvinit_development.html +++ b/blog/Taking_over_sysvinit_development.html @@ -69,6 +69,8 @@ distributions are moving to upstart as a syvinit replacement.

April (3)

May (1)

2009 @@ -124,9 +126,9 @@ distributions are moving to upstart as a syvinit replacement.

@@ -142,7 +144,7 @@ distributions are moving to upstart as a syvinit replacement.

diff --git a/blog/Teknisk_program_for_Go_Open_2009_er_nesten_ferdig.html b/blog/Teknisk_program_for_Go_Open_2009_er_nesten_ferdig.html index a340478390..7425a7b2ff 100644 --- a/blog/Teknisk_program_for_Go_Open_2009_er_nesten_ferdig.html +++ b/blog/Teknisk_program_for_Go_Open_2009_er_nesten_ferdig.html @@ -75,6 +75,8 @@ stort.

April (3)

May (1)

2009 @@ -130,9 +132,9 @@ stort.

@@ -148,7 +150,7 @@ stort.

diff --git a/blog/Tester_blog.html b/blog/Tester_blog.html index 518ec49a8a..fb9c929228 100644 --- a/blog/Tester_blog.html +++ b/blog/Tester_blog.html @@ -50,6 +50,8 @@ forsÃ¸k.

April (3)

May (1)

2009 @@ -105,9 +107,9 @@ forsÃ¸k.

@@ -123,7 +125,7 @@ forsÃ¸k.

diff --git a/blog/Testing_av_reprap_elektronikken_igang.html b/blog/Testing_av_reprap_elektronikken_igang.html index 583e969b6a..8156575be6 100644 --- a/blog/Testing_av_reprap_elektronikken_igang.html +++ b/blog/Testing_av_reprap_elektronikken_igang.html @@ -78,6 +78,8 @@ reprap-en kvikner til.

April (3)

May (1)

2009 @@ -133,9 +135,9 @@ reprap-en kvikner til.

@@ -151,7 +153,7 @@ reprap-en kvikner til.

diff --git a/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html b/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html index 413b1a3cb7..7be0014bb2 100644 --- a/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html +++ b/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html @@ -65,6 +65,8 @@ be the only one fitting our needs. :/

April (3)

May (1)

2009 @@ -120,9 +122,9 @@ be the only one fitting our needs. :/

@@ -138,7 +140,7 @@ be the only one fitting our needs. :/

diff --git a/blog/Thoughts_on_roaming_laptop_setup_for_Debian_Edu.html b/blog/Thoughts_on_roaming_laptop_setup_for_Debian_Edu.html index 2edb7896b3..bd08ce5d11 100644 --- a/blog/Thoughts_on_roaming_laptop_setup_for_Debian_Edu.html +++ b/blog/Thoughts_on_roaming_laptop_setup_for_Debian_Edu.html @@ -112,6 +112,8 @@ please contact us on debian-edu@lists.debian.org.

April (3)

May (1)

2009 @@ -167,9 +169,9 @@ please contact us on debian-edu@lists.debian.org.

@@ -185,7 +187,7 @@ please contact us on debian-edu@lists.debian.org.

diff --git a/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html b/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html index 679da90f96..b0549255e3 100644 --- a/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html +++ b/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html @@ -79,6 +79,8 @@ new IETF work group?

April (3)

May (1)

2009 @@ -134,9 +136,9 @@ new IETF work group?

@@ -152,7 +154,7 @@ new IETF work group?

diff --git a/blog/Transendentalt_tullball_og_en_funksjonell_tiln__rming.html b/blog/Transendentalt_tullball_og_en_funksjonell_tiln__rming.html index 5eb96d465a..66d13abe02 100644 --- a/blog/Transendentalt_tullball_og_en_funksjonell_tiln__rming.html +++ b/blog/Transendentalt_tullball_og_en_funksjonell_tiln__rming.html @@ -66,6 +66,8 @@ opplÃ¸sning.

April (3)

May (1)

2009 @@ -121,9 +123,9 @@ opplÃ¸sning.

@@ -139,7 +141,7 @@ opplÃ¸sning.

diff --git a/blog/Two_projects_that_have_improved_the_quality_of_free_software_a_lot.html b/blog/Two_projects_that_have_improved_the_quality_of_free_software_a_lot.html index 86f8ebefb2..ae18cdef10 100644 --- a/blog/Two_projects_that_have_improved_the_quality_of_free_software_a_lot.html +++ b/blog/Two_projects_that_have_improved_the_quality_of_free_software_a_lot.html @@ -83,6 +83,8 @@ surrounded by today.

April (3)

May (1)

2009 @@ -138,9 +140,9 @@ surrounded by today.

@@ -156,7 +158,7 @@ surrounded by today.

diff --git a/blog/Using_bar_codes_at_a_computing_center.html b/blog/Using_bar_codes_at_a_computing_center.html index c9a6d7826e..224eacb0ea 100644 --- a/blog/Using_bar_codes_at_a_computing_center.html +++ b/blog/Using_bar_codes_at_a_computing_center.html @@ -88,6 +88,8 @@ easier automatic tracking of computers.

April (3)

May (1)

2009 @@ -143,9 +145,9 @@ easier automatic tracking of computers.

@@ -161,7 +163,7 @@ easier automatic tracking of computers.

diff --git a/blog/Vitenskapens_dogmer___.html b/blog/Vitenskapens_dogmer___.html index ec0bc369b1..354254f137 100644 --- a/blog/Vitenskapens_dogmer___.html +++ b/blog/Vitenskapens_dogmer___.html @@ -115,6 +115,8 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

April (3)

May (1)

2009 @@ -170,9 +172,9 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -188,7 +190,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

diff --git a/blog/Webbasert_tegneseriearkiv_p___trappene.html b/blog/Webbasert_tegneseriearkiv_p___trappene.html index 19745a6d56..5b3cfc4ee4 100644 --- a/blog/Webbasert_tegneseriearkiv_p___trappene.html +++ b/blog/Webbasert_tegneseriearkiv_p___trappene.html @@ -92,6 +92,8 @@ titt.

April (3)

May (1)

2009 @@ -147,9 +149,9 @@ titt.

@@ -165,7 +167,7 @@ titt.

diff --git a/blog/When_web_browser_developers_make_a_video_player___.html b/blog/When_web_browser_developers_make_a_video_player___.html index c8d2506835..a7cb075f02 100644 --- a/blog/When_web_browser_developers_make_a_video_player___.html +++ b/blog/When_web_browser_developers_make_a_video_player___.html @@ -89,6 +89,8 @@ sure hope it was using the announced Ogg Theora support. :)

April (3)

May (1)

2009 @@ -144,9 +146,9 @@ sure hope it was using the announced Ogg Theora support. :)

@@ -162,7 +164,7 @@ sure hope it was using the announced Ogg Theora support. :)

diff --git a/blog/archive/2008/11/index.html b/blog/archive/2008/11/index.html index 19ff9e850f..d88109ef42 100644 --- a/blog/archive/2008/11/index.html +++ b/blog/archive/2008/11/index.html @@ -210,6 +210,8 @@ lenge alt er klart til Go Open

April (3)

May (1)

2009 @@ -265,9 +267,9 @@ lenge alt er klart til Go Open

@@ -283,7 +285,7 @@ lenge alt er klart til Go Open

diff --git a/blog/archive/2008/12/index.html b/blog/archive/2008/12/index.html index 5c9e046ede..ab83f77960 100644 --- a/blog/archive/2008/12/index.html +++ b/blog/archive/2008/12/index.html @@ -374,6 +374,8 @@ larger stick as well.

April (3)

May (1)

2009 @@ -429,9 +431,9 @@ larger stick as well.

@@ -447,7 +449,7 @@ larger stick as well.

diff --git a/blog/archive/2009/01/index.html b/blog/archive/2009/01/index.html index 58f43142ce..390090ee89 100644 --- a/blog/archive/2009/01/index.html +++ b/blog/archive/2009/01/index.html @@ -543,6 +543,8 @@ produkter basert pÃ¥ standarden.

April (3)

May (1)

2009 @@ -598,9 +600,9 @@ produkter basert pÃ¥ standarden.

@@ -616,7 +618,7 @@ produkter basert pÃ¥ standarden.

diff --git a/blog/archive/2009/02/index.html b/blog/archive/2009/02/index.html index 7a60afadc6..e600f720aa 100644 --- a/blog/archive/2009/02/index.html +++ b/blog/archive/2009/02/index.html @@ -521,6 +521,8 @@ do so.

April (3)

May (1)

2009 @@ -576,9 +578,9 @@ do so.

@@ -594,7 +596,7 @@ do so.

diff --git a/blog/archive/2009/03/index.html b/blog/archive/2009/03/index.html index 051765a16b..132b8da4a1 100644 --- a/blog/archive/2009/03/index.html +++ b/blog/archive/2009/03/index.html @@ -710,6 +710,8 @@ application that do not use open network protocol or open formats.

April (3)

May (1)

2009 @@ -765,9 +767,9 @@ application that do not use open network protocol or open formats.

@@ -783,7 +785,7 @@ application that do not use open network protocol or open formats.

diff --git a/blog/archive/2009/04/index.html b/blog/archive/2009/04/index.html index d8b8adaf39..136a62d63b 100644 --- a/blog/archive/2009/04/index.html +++ b/blog/archive/2009/04/index.html @@ -502,6 +502,8 @@ properties.

April (3)

May (1)

2009 @@ -557,9 +559,9 @@ properties.

@@ -575,7 +577,7 @@ properties.

diff --git a/blog/archive/2009/05/index.html b/blog/archive/2009/05/index.html index b3fe17a35d..e5f51df61f 100644 --- a/blog/archive/2009/05/index.html +++ b/blog/archive/2009/05/index.html @@ -459,6 +459,8 @@ bidrar positivt.

April (3)

May (1)

2009 @@ -514,9 +516,9 @@ bidrar positivt.

@@ -532,7 +534,7 @@ bidrar positivt.

diff --git a/blog/archive/2009/06/index.html b/blog/archive/2009/06/index.html index ac2be4f71c..413e87139d 100644 --- a/blog/archive/2009/06/index.html +++ b/blog/archive/2009/06/index.html @@ -222,6 +222,8 @@ misvisende pÃ¥stander etter i sÃ¸mmene.

April (3)

May (1)

2009 @@ -277,9 +279,9 @@ misvisende pÃ¥stander etter i sÃ¸mmene.

@@ -295,7 +297,7 @@ misvisende pÃ¥stander etter i sÃ¸mmene.

diff --git a/blog/archive/2009/07/index.html b/blog/archive/2009/07/index.html index c1b11d4eab..5ce24261b3 100644 --- a/blog/archive/2009/07/index.html +++ b/blog/archive/2009/07/index.html @@ -210,6 +210,8 @@ non-predictable kernel in the early boot.

April (3)

May (1)

2009 @@ -265,9 +267,9 @@ non-predictable kernel in the early boot.

@@ -283,7 +285,7 @@ non-predictable kernel in the early boot.

diff --git a/blog/archive/2009/08/index.html b/blog/archive/2009/08/index.html index 51a07129b8..4e14f2b72f 100644 --- a/blog/archive/2009/08/index.html +++ b/blog/archive/2009/08/index.html @@ -223,6 +223,8 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

April (3)

May (1)

2009 @@ -278,9 +280,9 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

@@ -296,7 +298,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

diff --git a/blog/archive/2009/09/index.html b/blog/archive/2009/09/index.html index 26ac58cd3e..44445bee9b 100644 --- a/blog/archive/2009/09/index.html +++ b/blog/archive/2009/09/index.html @@ -80,6 +80,8 @@ DRM mÃ¥ anses som et kjÃ¸p.

April (3)

May (1)

2009 @@ -135,9 +137,9 @@ DRM mÃ¥ anses som et kjÃ¸p.

@@ -153,7 +155,7 @@ DRM mÃ¥ anses som et kjÃ¸p.

diff --git a/blog/archive/2009/10/index.html b/blog/archive/2009/10/index.html index c393dd2c45..a45a3f4832 100644 --- a/blog/archive/2009/10/index.html +++ b/blog/archive/2009/10/index.html @@ -192,6 +192,8 @@ nettbankkontroll over egne midler. :(

April (3)

May (1)

2009 @@ -247,9 +249,9 @@ nettbankkontroll over egne midler. :(

@@ -265,7 +267,7 @@ nettbankkontroll over egne midler. :(

diff --git a/blog/archive/2009/11/index.html b/blog/archive/2009/11/index.html index ec1008ed1f..c38b39d359 100644 --- a/blog/archive/2009/11/index.html +++ b/blog/archive/2009/11/index.html @@ -177,6 +177,8 @@ er ubrukelig til dette.

April (3)

May (1)

2009 @@ -232,9 +234,9 @@ er ubrukelig til dette.

@@ -250,7 +252,7 @@ er ubrukelig til dette.

diff --git a/blog/archive/2009/12/index.html b/blog/archive/2009/12/index.html index 31ff783dfd..1c0e652d13 100644 --- a/blog/archive/2009/12/index.html +++ b/blog/archive/2009/12/index.html @@ -162,6 +162,8 @@ pÃ¥ flyplassene.

April (3)

May (1)

2009 @@ -217,9 +219,9 @@ pÃ¥ flyplassene.

@@ -235,7 +237,7 @@ pÃ¥ flyplassene.

diff --git a/blog/archive/2010/01/index.html b/blog/archive/2010/01/index.html index 55758e660e..5cbbb0fc37 100644 --- a/blog/archive/2010/01/index.html +++ b/blog/archive/2010/01/index.html @@ -145,6 +145,8 @@ platforme.

April (3)

May (1)

2009 @@ -200,9 +202,9 @@ platforme.

@@ -218,7 +220,7 @@ platforme.

diff --git a/blog/archive/2010/02/index.html b/blog/archive/2010/02/index.html index d9ba10495e..99f63f8be9 100644 --- a/blog/archive/2010/02/index.html +++ b/blog/archive/2010/02/index.html @@ -76,6 +76,8 @@ and have just a few weeks or months to make it happen.

April (3)

May (1)

2009 @@ -131,9 +133,9 @@ and have just a few weeks or months to make it happen.

@@ -149,7 +151,7 @@ and have just a few weeks or months to make it happen.

diff --git a/blog/archive/2010/03/index.html b/blog/archive/2010/03/index.html index be98508325..a6f9dbf5d1 100644 --- a/blog/archive/2010/03/index.html +++ b/blog/archive/2010/03/index.html @@ -165,6 +165,8 @@ Hr. Fossen. MÃ¥ innrÃ¸mme at jeg tviler pÃ¥ det.

April (3)

May (1)

2009 @@ -220,9 +222,9 @@ Hr. Fossen. MÃ¥ innrÃ¸mme at jeg tviler pÃ¥ det.

@@ -238,7 +240,7 @@ Hr. Fossen. MÃ¥ innrÃ¸mme at jeg tviler pÃ¥ det.

diff --git a/blog/archive/2010/04/index.html b/blog/archive/2010/04/index.html index 2ff4e2370c..8a2a82fc8b 100644 --- a/blog/archive/2010/04/index.html +++ b/blog/archive/2010/04/index.html @@ -219,6 +219,8 @@ please contact us on debian-edu@lists.debian.org.

April (3)

May (1)

2009 @@ -274,9 +276,9 @@ please contact us on debian-edu@lists.debian.org.

@@ -292,7 +294,7 @@ please contact us on debian-edu@lists.debian.org.

diff --git a/blog/archive/2010/05/05.rss b/blog/archive/2010/05/05.rss new file mode 100644 index 0000000000..89218589f8 --- /dev/null +++ b/blog/archive/2010/05/05.rss @@ -0,0 +1,76 @@ + + + + Petter Reinholdtsen - Entries from May 2010 + Entries from May 2010 + ../../../ + + + + Forcing new users to change their password on first login + ../../../Forcing_new_users_to_change_their_password_on_first_login.html + ../../../Forcing_new_users_to_change_their_password_on_first_login.html + Sun, 2 May 2010 13:40:00 +0200 + +One interesting feature in Active Directory, is the ability to +create a new user with an expired password, and thus force the user to +change the password on the first login attempt. + +I'm not quite sure how to do that with the LDAP setup in Debian +Edu, but did some initial testing with a local account. The account +and password aging information is available in /etc/shadow, but +unfortunately, it is not possible to specify an expiration time for +passwords, only a maximum age for passwords. + +A freshly created account (using adduser test) will have these +settings in /etc/shadow: + +<blockquote><pre> +root@tjener:~# chage -l test +Last password change : May 02, 2010 +Password expires : never +Password inactive : never +Account expires : never +Minimum number of days between password change : 0 +Maximum number of days between password change : 99999 +Number of days of warning before password expires : 7 +root@tjener:~# +</pre></blockquote> + +The only way I could come up with to create a user with an expired +account, is to change the date of the last password change to the +lowest value possible (January 1th 1970), and the maximum password age +to the difference in days between that date and today. To make it +simple, I went for 30 years (30 * 365 = 10950) and January 2th (to +avoid testing if 0 is a valid value). + +After using these commands to set it up, it seem to work as +intended: + +<blockquote><pre> +root@tjener:~# chage -d 1 test; chage -M 10950 test +root@tjener:~# chage -l test +Last password change : Jan 02, 1970 +Password expires : never +Password inactive : never +Account expires : never +Minimum number of days between password change : 0 +Maximum number of days between password change : 10950 +Number of days of warning before password expires : 7 +root@tjener:~# +</pre></blockquote> + +So far I have tested this with ssh and console, and kdm (in +Squeeze) login, and all ask for a new password before login in the +user (with ssh, I was thrown out and had to log in again). + +Perhaps we should set up something similar for Debian Edu, to make +sure only the user itself have the account password? + +If you want to comment on or help out with implementing this for +Debian Edu, please contact us on debian-edu@lists.debian.org. + + + + + diff --git a/blog/archive/2010/05/index.html b/blog/archive/2010/05/index.html new file mode 100644 index 0000000000..b9d767f1c7 --- /dev/null +++ b/blog/archive/2010/05/index.html @@ -0,0 +1,223 @@ + + + + Petter Reinholdtsen: entries from May 2010 + + + + + + +

+ Petter Reinholdtsen + +

+ +

Entries from May 2010.

+ + +

+ Forcing new users to change their password on first login +

+ 2010-05-02 13:40 +

+ +

One interesting feature in Active Directory, is the ability to +create a new user with an expired password, and thus force the user to +change the password on the first login attempt.

+ +

I'm not quite sure how to do that with the LDAP setup in Debian +Edu, but did some initial testing with a local account. The account +and password aging information is available in /etc/shadow, but +unfortunately, it is not possible to specify an expiration time for +passwords, only a maximum age for passwords.

+ +

A freshly created account (using adduser test) will have these +settings in /etc/shadow:

+ +

+root@tjener:~# chage -l test
+Last password change                                    : May 02, 2010
+Password expires                                        : never
+Password inactive                                       : never
+Account expires                                         : never
+Minimum number of days between password change          : 0
+Maximum number of days between password change          : 99999
+Number of days of warning before password expires       : 7
+root@tjener:~#
+

+ +

The only way I could come up with to create a user with an expired +account, is to change the date of the last password change to the +lowest value possible (January 1th 1970), and the maximum password age +to the difference in days between that date and today. To make it +simple, I went for 30 years (30 * 365 = 10950) and January 2th (to +avoid testing if 0 is a valid value).

+ +

After using these commands to set it up, it seem to work as +intended:

+ +

+root@tjener:~# chage -d 1 test; chage -M 10950 test
+root@tjener:~# chage -l test
+Last password change                                    : Jan 02, 1970
+Password expires                                        : never
+Password inactive                                       : never
+Account expires                                         : never
+Minimum number of days between password change          : 0
+Maximum number of days between password change          : 10950
+Number of days of warning before password expires       : 7
+root@tjener:~#  
+

+ +

So far I have tested this with ssh and console, and kdm (in +Squeeze) login, and all ask for a new password before login in the +user (with ssh, I was thrown out and had to log in again).

+ +

Perhaps we should set up something similar for Debian Edu, to make +sure only the user itself have the account password?

+ +

If you want to comment on or help out with implementing this for +Debian Edu, please contact us on debian-edu@lists.debian.org.

+ +

+ + + + Tags: debian edu, english, nuug. + +

+ +

+ + + + + + diff --git a/blog/data/2010-05-02-expired-passwords.txt b/blog/data/2010-05-02-expired-passwords.txt index 30759406b9..e1a3d35a81 100644 --- a/blog/data/2010-05-02-expired-passwords.txt +++ b/blog/data/2010-05-02-expired-passwords.txt @@ -1,6 +1,6 @@ Title: Forcing new users to change their password on first login Tags: english, nuug, debian edu -Date: 2010-05-02 13:40 +Date: 2010-05-02 13:47

One interesting feature in Active Directory, is the ability to create a new user with an expired password, and thus force the user to diff --git a/blog/index.html b/blog/index.html index 86507416b6..23c7c14163 100644 --- a/blog/index.html +++ b/blog/index.html @@ -19,6 +19,78 @@ +

Forcing new users to change their password on first login

2010-05-02 13:40

One interesting feature in Active Directory, is the ability to +create a new user with an expired password, and thus force the user to +change the password on the first login attempt.

+ +

A freshly created account (using adduser test) will have these +settings in /etc/shadow:

+ +

+root@tjener:~# chage -l test
+Last password change                                    : May 02, 2010
+Password expires                                        : never
+Password inactive                                       : never
+Account expires                                         : never
+Minimum number of days between password change          : 0
+Maximum number of days between password change          : 99999
+Number of days of warning before password expires       : 7
+root@tjener:~#
+

+ +

After using these commands to set it up, it seem to work as +intended:

+ +

+root@tjener:~# chage -d 1 test; chage -M 10950 test
+root@tjener:~# chage -l test
+Last password change                                    : Jan 02, 1970
+Password expires                                        : never
+Password inactive                                       : never
+Account expires                                         : never
+Minimum number of days between password change          : 0
+Maximum number of days between password change          : 10950
+Number of days of warning before password expires       : 7
+root@tjener:~#  
+

+ +

So far I have tested this with ssh and console, and kdm (in +Squeeze) login, and all ask for a new password before login in the +user (with ssh, I was thrown out and had to log in again).

+ +

Perhaps we should set up something similar for Debian Edu, to make +sure only the user itself have the account password?

+ +

If you want to comment on or help out with implementing this for +Debian Edu, please contact us on debian-edu@lists.debian.org.

+ + + + Tags: debian edu, english, nuug. + +

Thoughts on roaming laptop setup for Debian Edu

2010-04-28 20:40

@@ -401,32 +473,6 @@ everything is taken care of.

Sikkerhet, teater, og hvordan gjÃ¸re verden sikrere

2009-12-30 16:35

Via Slashdot fant jeg en -nydelig -kommentar fra Bruce Schneier som ble publisert hos CNN i gÃ¥r. Den -forklarer forbilledlig hvorfor sikkerhetsteater og innfÃ¸ring av -totalitÃ¦re politistatmetoder ikke er lÃ¸sningen for Ã¥ gjÃ¸re verden -sikrere. Anbefales pÃ¥ det varmeste.

- -

Oppdatering: Kom over -nok -en kommentar om den manglende effekten av dagens sikkerhetsteater -pÃ¥ flyplassene.

- - - - Tags: norsk, nuug, personvern, sikkerhet. - -

@@ -449,6 +495,8 @@ pÃ¥ flyplassene.

April (3)

May (1)

2009 @@ -504,9 +552,9 @@ pÃ¥ flyplassene.

@@ -522,7 +570,7 @@ pÃ¥ flyplassene.

diff --git a/blog/index.rss b/blog/index.rss index 8a87664fd1..9267d3bcee 100644 --- a/blog/index.rss +++ b/blog/index.rss @@ -6,6 +6,72 @@ + + Forcing new users to change their password on first login + Forcing_new_users_to_change_their_password_on_first_login.html + Forcing_new_users_to_change_their_password_on_first_login.html + Sun, 2 May 2010 13:40:00 +0200 + +One interesting feature in Active Directory, is the ability to +create a new user with an expired password, and thus force the user to +change the password on the first login attempt. + +I'm not quite sure how to do that with the LDAP setup in Debian +Edu, but did some initial testing with a local account. The account +and password aging information is available in /etc/shadow, but +unfortunately, it is not possible to specify an expiration time for +passwords, only a maximum age for passwords. + +A freshly created account (using adduser test) will have these +settings in /etc/shadow: + +<blockquote><pre> +root@tjener:~# chage -l test +Last password change : May 02, 2010 +Password expires : never +Password inactive : never +Account expires : never +Minimum number of days between password change : 0 +Maximum number of days between password change : 99999 +Number of days of warning before password expires : 7 +root@tjener:~# +</pre></blockquote> + +The only way I could come up with to create a user with an expired +account, is to change the date of the last password change to the +lowest value possible (January 1th 1970), and the maximum password age +to the difference in days between that date and today. To make it +simple, I went for 30 years (30 * 365 = 10950) and January 2th (to +avoid testing if 0 is a valid value). + +After using these commands to set it up, it seem to work as +intended: + +<blockquote><pre> +root@tjener:~# chage -d 1 test; chage -M 10950 test +root@tjener:~# chage -l test +Last password change : Jan 02, 1970 +Password expires : never +Password inactive : never +Account expires : never +Minimum number of days between password change : 0 +Maximum number of days between password change : 10950 +Number of days of warning before password expires : 7 +root@tjener:~# +</pre></blockquote> + +So far I have tested this with ssh and console, and kdm (in +Squeeze) login, and all ask for a new password before login in the +user (with ssh, I was thrown out and had to log in again). + +Perhaps we should set up something similar for Debian Edu, to make +sure only the user itself have the account password? + +If you want to comment on or help out with implementing this for +Debian Edu, please contact us on debian-edu@lists.debian.org. + + + Thoughts on roaming laptop setup for Debian Edu Thoughts_on_roaming_laptop_setup_for_Debian_Edu.html @@ -334,25 +400,5 @@ everything is taken care of. - - Sikkerhet, teater, og hvordan gjÃ¸re verden sikrere - Sikkerhet__teater__og_hvordan_gj__re_verden_sikrere.html - Sikkerhet__teater__og_hvordan_gj__re_verden_sikrere.html - Wed, 30 Dec 2009 16:35:00 +0100 - -Via Slashdot fant jeg en -<a href="http://www.cnn.com/2009/OPINION/12/29/schneier.air.travel.security.theater/index.html">nydelig -kommentar fra Bruce Schneier</a> som ble publisert hos CNN i gÃ¥r. Den -forklarer forbilledlig hvorfor sikkerhetsteater og innfÃ¸ring av -totalitÃ¦re politistatmetoder ikke er lÃ¸sningen for Ã¥ gjÃ¸re verden -sikrere. Anbefales pÃ¥ det varmeste. - -Oppdatering: Kom over -<a href="http://gizmodo.com/5435675/president-obama-its-time-to-fire-the-tsa">nok -en kommentar</a> om den manglende effekten av dagens sikkerhetsteater -pÃ¥ flyplassene. - - - diff --git a/blog/sitemap.xml b/blog/sitemap.xml index 048fa95348..525bba05f9 100644 --- a/blog/sitemap.xml +++ b/blog/sitemap.xml @@ -145,6 +145,11 @@ 0.50 weekly + + Forcing_new_users_to_change_their_password_on_first_login.html + 0.50 + weekly + Fransk_idiotlovforslag_hinker_gjennom_parlamentet.html 0.50 diff --git a/blog/tags/3d-printer/index.html b/blog/tags/3d-printer/index.html index 52a15368b8..04e880525f 100644 --- a/blog/tags/3d-printer/index.html +++ b/blog/tags/3d-printer/index.html @@ -574,6 +574,8 @@ massemarkedet.

April (3)

May (1)

2009 @@ -629,9 +631,9 @@ massemarkedet.

@@ -647,7 +649,7 @@ massemarkedet.

diff --git a/blog/tags/amiga/index.html b/blog/tags/amiga/index.html index 556a50a5d9..d9aa256a15 100644 --- a/blog/tags/amiga/index.html +++ b/blog/tags/amiga/index.html @@ -73,6 +73,8 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

April (3)

May (1)

2009 @@ -128,9 +130,9 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -146,7 +148,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

diff --git a/blog/tags/aros/index.html b/blog/tags/aros/index.html index 97858cc380..91abe16468 100644 --- a/blog/tags/aros/index.html +++ b/blog/tags/aros/index.html @@ -73,6 +73,8 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

April (3)

May (1)

2009 @@ -128,9 +130,9 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -146,7 +148,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

diff --git a/blog/tags/debian edu/debian edu.rss b/blog/tags/debian edu/debian edu.rss index 4d643ef3bd..a0f2ecb307 100644 --- a/blog/tags/debian edu/debian edu.rss +++ b/blog/tags/debian edu/debian edu.rss @@ -495,5 +495,71 @@ please contact us on debian-edu@lists.debian.org. + + Forcing new users to change their password on first login + ../../Forcing_new_users_to_change_their_password_on_first_login.html + ../../Forcing_new_users_to_change_their_password_on_first_login.html + Sun, 2 May 2010 13:40:00 +0200 + +One interesting feature in Active Directory, is the ability to +create a new user with an expired password, and thus force the user to +change the password on the first login attempt. + +I'm not quite sure how to do that with the LDAP setup in Debian +Edu, but did some initial testing with a local account. The account +and password aging information is available in /etc/shadow, but +unfortunately, it is not possible to specify an expiration time for +passwords, only a maximum age for passwords. + +A freshly created account (using adduser test) will have these +settings in /etc/shadow: + +<blockquote><pre> +root@tjener:~# chage -l test +Last password change : May 02, 2010 +Password expires : never +Password inactive : never +Account expires : never +Minimum number of days between password change : 0 +Maximum number of days between password change : 99999 +Number of days of warning before password expires : 7 +root@tjener:~# +</pre></blockquote> + +The only way I could come up with to create a user with an expired +account, is to change the date of the last password change to the +lowest value possible (January 1th 1970), and the maximum password age +to the difference in days between that date and today. To make it +simple, I went for 30 years (30 * 365 = 10950) and January 2th (to +avoid testing if 0 is a valid value). + +After using these commands to set it up, it seem to work as +intended: + +<blockquote><pre> +root@tjener:~# chage -d 1 test; chage -M 10950 test +root@tjener:~# chage -l test +Last password change : Jan 02, 1970 +Password expires : never +Password inactive : never +Account expires : never +Minimum number of days between password change : 0 +Maximum number of days between password change : 10950 +Number of days of warning before password expires : 7 +root@tjener:~# +</pre></blockquote> + +So far I have tested this with ssh and console, and kdm (in +Squeeze) login, and all ask for a new password before login in the +user (with ssh, I was thrown out and had to log in again). + +Perhaps we should set up something similar for Debian Edu, to make +sure only the user itself have the account password? + +If you want to comment on or help out with implementing this for +Debian Edu, please contact us on debian-edu@lists.debian.org. + + + diff --git a/blog/tags/debian edu/index.html b/blog/tags/debian edu/index.html index c0db617587..5fd81900a0 100644 --- a/blog/tags/debian edu/index.html +++ b/blog/tags/debian edu/index.html @@ -686,6 +686,85 @@ please contact us on debian-edu@lists.debian.org.

+ Tags: debian edu, english, nuug. + +

+ +

+ Forcing new users to change their password on first login +

+ 2010-05-02 13:40 +

+ +

One interesting feature in Active Directory, is the ability to +create a new user with an expired password, and thus force the user to +change the password on the first login attempt.

+ +

A freshly created account (using adduser test) will have these +settings in /etc/shadow:

+ +

+root@tjener:~# chage -l test
+Last password change                                    : May 02, 2010
+Password expires                                        : never
+Password inactive                                       : never
+Account expires                                         : never
+Minimum number of days between password change          : 0
+Maximum number of days between password change          : 99999
+Number of days of warning before password expires       : 7
+root@tjener:~#
+

+ +

After using these commands to set it up, it seem to work as +intended:

+ +

+root@tjener:~# chage -d 1 test; chage -M 10950 test
+root@tjener:~# chage -l test
+Last password change                                    : Jan 02, 1970
+Password expires                                        : never
+Password inactive                                       : never
+Account expires                                         : never
+Minimum number of days between password change          : 0
+Maximum number of days between password change          : 10950
+Number of days of warning before password expires       : 7
+root@tjener:~#  
+

+ +

So far I have tested this with ssh and console, and kdm (in +Squeeze) login, and all ask for a new password before login in the +user (with ssh, I was thrown out and had to log in again).

+ +

Perhaps we should set up something similar for Debian Edu, to make +sure only the user itself have the account password?

+ +

If you want to comment on or help out with implementing this for +Debian Edu, please contact us on debian-edu@lists.debian.org.

+ +

+ + + Tags: debian edu, english, nuug.

@@ -713,6 +792,8 @@ please contact us on debian-edu@lists.debian.org.

April (3)

May (1)

2009 @@ -768,9 +849,9 @@ please contact us on debian-edu@lists.debian.org.

@@ -786,7 +867,7 @@ please contact us on debian-edu@lists.debian.org.

diff --git a/blog/tags/debian/index.html b/blog/tags/debian/index.html index a61716be71..40716c76ea 100644 --- a/blog/tags/debian/index.html +++ b/blog/tags/debian/index.html @@ -652,6 +652,8 @@ non-predictable kernel in the early boot.

April (3)

May (1)

2009 @@ -707,9 +709,9 @@ non-predictable kernel in the early boot.

@@ -725,7 +727,7 @@ non-predictable kernel in the early boot.

diff --git a/blog/tags/english/english.rss b/blog/tags/english/english.rss index 93bc1dc3d7..fdf4f637f9 100644 --- a/blog/tags/english/english.rss +++ b/blog/tags/english/english.rss @@ -997,5 +997,71 @@ please contact us on debian-edu@lists.debian.org. + + Forcing new users to change their password on first login + ../../Forcing_new_users_to_change_their_password_on_first_login.html + ../../Forcing_new_users_to_change_their_password_on_first_login.html + Sun, 2 May 2010 13:40:00 +0200 + +One interesting feature in Active Directory, is the ability to +create a new user with an expired password, and thus force the user to +change the password on the first login attempt. + +I'm not quite sure how to do that with the LDAP setup in Debian +Edu, but did some initial testing with a local account. The account +and password aging information is available in /etc/shadow, but +unfortunately, it is not possible to specify an expiration time for +passwords, only a maximum age for passwords. + +A freshly created account (using adduser test) will have these +settings in /etc/shadow: + +<blockquote><pre> +root@tjener:~# chage -l test +Last password change : May 02, 2010 +Password expires : never +Password inactive : never +Account expires : never +Minimum number of days between password change : 0 +Maximum number of days between password change : 99999 +Number of days of warning before password expires : 7 +root@tjener:~# +</pre></blockquote> + +The only way I could come up with to create a user with an expired +account, is to change the date of the last password change to the +lowest value possible (January 1th 1970), and the maximum password age +to the difference in days between that date and today. To make it +simple, I went for 30 years (30 * 365 = 10950) and January 2th (to +avoid testing if 0 is a valid value). + +After using these commands to set it up, it seem to work as +intended: + +<blockquote><pre> +root@tjener:~# chage -d 1 test; chage -M 10950 test +root@tjener:~# chage -l test +Last password change : Jan 02, 1970 +Password expires : never +Password inactive : never +Account expires : never +Minimum number of days between password change : 0 +Maximum number of days between password change : 10950 +Number of days of warning before password expires : 7 +root@tjener:~# +</pre></blockquote> + +So far I have tested this with ssh and console, and kdm (in +Squeeze) login, and all ask for a new password before login in the +user (with ssh, I was thrown out and had to log in again). + +Perhaps we should set up something similar for Debian Edu, to make +sure only the user itself have the account password? + +If you want to comment on or help out with implementing this for +Debian Edu, please contact us on debian-edu@lists.debian.org. + + + diff --git a/blog/tags/english/index.html b/blog/tags/english/index.html index 437d0ffa2a..266983933b 100644 --- a/blog/tags/english/index.html +++ b/blog/tags/english/index.html @@ -1305,6 +1305,85 @@ please contact us on debian-edu@lists.debian.org.

+ Tags: debian edu, english, nuug. + +

+ Petter Reinholdtsen + +

Archive

Tags