There is a SLES 11 machine. The users logs in via SSH and pubkey (mixed, some user uses password, some use ssh key)The sshd_config has: UsePAM yesPasswordAuthentication yesPubkeyAuthentication yesThe problem: If the password expires for a user that uses pubkey login, then the user will be prompted to change password. The question: How can we set the PAM or sshd config to allow users to log in if they have a valid SSH key and they're password expired? - Without popping up change your password. UPDATE#1: The solution can't be: UsePAM noSERVER:~ # cat /etc/pam.d/sshd #%PAM-1.0auth        requisite   pam_nologin.soauth        include     common-authaccount     requisite   pam_nologin.soaccount     include     common-accountpassword    include     common-passwordsession     required    pam_loginuid.sosession     include     common-sessionSERVER:~ # UPDATE#2: The solution can't be: set the users password to never expireUPDATE#3: SERVER:/etc/pam.d # cat common-account#%PAM-1.0...account required    pam_unix2.so    account required    pam_tally.soSERVER:/etc/pam.d # 
Expired password and SSH key based login with UsePAM yes
ssh;users;password;pam