On Ubuntu 24.10, when a user's password is set to expired, the password-change sequence in the native client fails: > Login Banner > > You are required to change your password immediately (administrator enforced). > Connection Error > > ThinLinc login failed. > (The SSH connection succeeded, but the ThinLinc server connection failed. > Perhaps this server doesn't run a ThinLinc server?) It works on Fedora, as such the expected sequence is: > Authentication > > You are required to change your password immediately (administrator enforced). > Current password: > <PROMPT> > Authentication > > New password: > <PROMPT> > Authentication > > Retype password: > <PROMPT> It also works with Web Access.
Nevermind, the issue was that "KbdInteractiveAuthentication" wasn't set to "yes" in /etc/ssh/sshd_config. With it set properly, it works fine on Ubuntu 24.10.
