Dear all,

We have a practice of getting user's passwords expired after 60 days and a strong password policy.
When a user tries to enter a password which is not compliant to the policy which is set putty exists without giving any feedback to the user. Below is something i captured from the putty log in one such case.

dumuser

password:
New Password:
sshd-kbdint: Password too short - must be at least 10 characters.

Access denied
No supported authentication methods left to try!

The real problem to me is how to get the putty session not to close and prompt the user of the sin he's comitting, further allow him to change the password accordingly.

All above did not come out on the putty session but the log which i enabled. Normal users do not do such things and complain that they have problems logging in.