Reset Password from lock screen

[Ryan Felder]

As the administrator of an authentication environment, I would like my users to be able to reset their password from the lock screen if their password expires.

Allowing a user to reset their password from a lock screen for a month after password expiry is no less secure than allowing the user's password to expire one month later and emailing them relentlessly.

If you allow the option to lock them out and require a password reset at a time period earlier than their expiration, their security privileges are never escalated, only reduced. I think that's an acceptable security policy, and would also be a very useful feature.

something something pipe to passwd, maybe?

[Ryan Felder (ryancfelder)]

I searched for a similar bug report.

I'm surprised I didn't find one and wonder if my search terms were off.

[Sebastien Bacher (seb128)]

unsure if that's a greeter or lightdm issue, also under Unity the lock screen is part of "unity", lightdm/unity-greeter provides the screen that lists the system users (that you get before first login or if you switch user)