Secondary password file creation and reset

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP












0














Is there any way to reset all passwords previously created when the secondary password file is enabled for the first time to ensure higher-level protection ?.










share|improve this question



















  • 2




    Can you give more details about this secondary password file? is it /etc/shadow or are you talking about something else?
    – A.B
    Dec 26 '18 at 13:10











  • Yes /etc/shadow only.
    – user328010
    Dec 26 '18 at 14:10















0














Is there any way to reset all passwords previously created when the secondary password file is enabled for the first time to ensure higher-level protection ?.










share|improve this question



















  • 2




    Can you give more details about this secondary password file? is it /etc/shadow or are you talking about something else?
    – A.B
    Dec 26 '18 at 13:10











  • Yes /etc/shadow only.
    – user328010
    Dec 26 '18 at 14:10













0












0








0







Is there any way to reset all passwords previously created when the secondary password file is enabled for the first time to ensure higher-level protection ?.










share|improve this question















Is there any way to reset all passwords previously created when the secondary password file is enabled for the first time to ensure higher-level protection ?.







command-line linux-kernel password command authentication






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Dec 26 '18 at 12:22









Rui F Ribeiro

39.3k1479131




39.3k1479131










asked Dec 26 '18 at 12:11









user328010user328010

4




4







  • 2




    Can you give more details about this secondary password file? is it /etc/shadow or are you talking about something else?
    – A.B
    Dec 26 '18 at 13:10











  • Yes /etc/shadow only.
    – user328010
    Dec 26 '18 at 14:10












  • 2




    Can you give more details about this secondary password file? is it /etc/shadow or are you talking about something else?
    – A.B
    Dec 26 '18 at 13:10











  • Yes /etc/shadow only.
    – user328010
    Dec 26 '18 at 14:10







2




2




Can you give more details about this secondary password file? is it /etc/shadow or are you talking about something else?
– A.B
Dec 26 '18 at 13:10





Can you give more details about this secondary password file? is it /etc/shadow or are you talking about something else?
– A.B
Dec 26 '18 at 13:10













Yes /etc/shadow only.
– user328010
Dec 26 '18 at 14:10




Yes /etc/shadow only.
– user328010
Dec 26 '18 at 14:10










1 Answer
1






active

oldest

votes


















0














You can choose to expire all user accounts with a loop using the passwd command, forcing them to change their password on next login. Avoid this on system accounts. Eg, user accounts on Linux Debian based systems start at uid 1000. Most system accounts have a disabled password anyway.



From man passwd:




-e, --expire

Immediately expire an account's password. This in effect can force a user to change his/her password at the user's next
login.




There are other related options to take care about (like -i, --inactive which might later disable such accounts).



Use a loop iterating on users (eg using contents of /etc/passwd or more generic using getent passwd [someuser]






share|improve this answer




















    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "106"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f490975%2fsecondary-password-file-creation-and-reset%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    You can choose to expire all user accounts with a loop using the passwd command, forcing them to change their password on next login. Avoid this on system accounts. Eg, user accounts on Linux Debian based systems start at uid 1000. Most system accounts have a disabled password anyway.



    From man passwd:




    -e, --expire

    Immediately expire an account's password. This in effect can force a user to change his/her password at the user's next
    login.




    There are other related options to take care about (like -i, --inactive which might later disable such accounts).



    Use a loop iterating on users (eg using contents of /etc/passwd or more generic using getent passwd [someuser]






    share|improve this answer

























      0














      You can choose to expire all user accounts with a loop using the passwd command, forcing them to change their password on next login. Avoid this on system accounts. Eg, user accounts on Linux Debian based systems start at uid 1000. Most system accounts have a disabled password anyway.



      From man passwd:




      -e, --expire

      Immediately expire an account's password. This in effect can force a user to change his/her password at the user's next
      login.




      There are other related options to take care about (like -i, --inactive which might later disable such accounts).



      Use a loop iterating on users (eg using contents of /etc/passwd or more generic using getent passwd [someuser]






      share|improve this answer























        0












        0








        0






        You can choose to expire all user accounts with a loop using the passwd command, forcing them to change their password on next login. Avoid this on system accounts. Eg, user accounts on Linux Debian based systems start at uid 1000. Most system accounts have a disabled password anyway.



        From man passwd:




        -e, --expire

        Immediately expire an account's password. This in effect can force a user to change his/her password at the user's next
        login.




        There are other related options to take care about (like -i, --inactive which might later disable such accounts).



        Use a loop iterating on users (eg using contents of /etc/passwd or more generic using getent passwd [someuser]






        share|improve this answer












        You can choose to expire all user accounts with a loop using the passwd command, forcing them to change their password on next login. Avoid this on system accounts. Eg, user accounts on Linux Debian based systems start at uid 1000. Most system accounts have a disabled password anyway.



        From man passwd:




        -e, --expire

        Immediately expire an account's password. This in effect can force a user to change his/her password at the user's next
        login.




        There are other related options to take care about (like -i, --inactive which might later disable such accounts).



        Use a loop iterating on users (eg using contents of /etc/passwd or more generic using getent passwd [someuser]







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Dec 26 '18 at 14:31









        A.BA.B

        4,0171724




        4,0171724



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Unix & Linux Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f490975%2fsecondary-password-file-creation-and-reset%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown






            Popular posts from this blog

            How to check contact read email or not when send email to Individual?

            Bahrain

            Postfix configuration issue with fips on centos 7; mailgun relay