> Source: [sk171914](https://support.checkpoint.com/results/sk/sk171914)

# sk171914 - Forced User Password Change Does Not Work

| Property | Value |
|----------|-------|
| Solution ID | sk171914 |
| Date Created | 2021-02-23 |
| Last Modified | 2022-03-08 |
| Technical Level | Advanced |
| Products | Security Gateway, Security Management Server |
| Versions | R82.10, R82, R81.20, R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * After the administrator sets password controls to force password change for a user, the next time that user logs in, their password fails.
* These errors are displayed when logging in as a "test" user for the first time: `
  `

  ```
  
  ssh test@localhost
  This system is for authorized use only.
  
  test@localhost's password:
  
  You are required to change your password immediately (root enforced)    
  
  Last login: Fri Dec 18 10:27:19 2020 from 10.10.10.10
  
  WARNING: Your password has expired.
  
  You must change your password now and login again!
  
  Changing password for user admin.  (Wrong username you will notice here as it should say "test"     
  Enter new UNIX password:
  
  
  Retype new UNIX password:
  
  bad credentials                   
  
  bad credentials
  
  bad credentials
  
  passwd: Authentication token manipulation error
  
  Connection to localhost closed.
  ```

  `
  `

## Cause

*/etc/ssh/sshd_config* is not configured correctly after R80.40 base installation for this type of password change to work properly.  

**\*Note: Starting from R80.40 Jumbo Hotfix Take 83, instead of editing/backing up /etc/ssh/sshd_config, you should edit/backup /etc/ssh/templates/sshd_config.templ and run /bin/sshd_template_xlate \< /config/active**

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content