InsightIQ user password reset auto-expired

Adding cluster caused invalid cluster details

bad password error message

This behavior is expected, as reset-password has the expectation that the password will then be set on subsequent login using the temporary password, which the insightiq user cannot due (due to /usr/sbin/nologin shell)

Steps are given by example below:

Dolphins971-1# isi auth users reset-password insightiq   <<<<< this step creates temp one time password
M'ie|6K6cXhjnG/i
Dolphins971-1# isi auth users view insightiq
                    Name: insightiq
                      DN: -
              DNS Domain: -
                  Domain: UNIX_USERS
                Provider: lsa-file-provider:System
        Sam Account Name: insightiq
                     UID: 15
                     SID: S-1-22-1-15
                 Enabled: Yes
                 Expired: No
                  Expiry: -
                  Locked: No
                   Email: -
                   GECOS: InsightIQ User
           Generated GID: No
           Generated UID: No
           Generated UPN: Yes
           Primary Group
                          ID: GID:15
                        Name: insightiq
          Home Directory: /ifs/home/insightiq
        Max Password Age: -
        Password Expired: Yes
         Password Expiry: 2025-02-25T08:57:46
       Password Last Set: -
        Password Expires: Yes
              Last Logon: -
                   Shell: /usr/sbin/nologin
                     UPN: insightiq@UNIX_USERS
User Can Change Password: No
   Disable When Inactive: No
Dolphins971-1# isi auth users modify insightiq --enabled=false
Dolphins971-1# isi auth users modify insightiq --prompt-password-change=true
Dolphins971-1# isi auth users modify insightiq --enabled=true
Dolphins971-1# su insightiq    <<<<< this step user is asked to create permanent new password as if logging into webui for first time
New password:    <<<<< This is asking for a new created password/not the reset password
Re-enter password:
This account is currently not available.
Dolphins971-1# isi auth users view insightiq
                    Name: insightiq
                      DN: -
              DNS Domain: -
                  Domain: UNIX_USERS
                Provider: lsa-file-provider:System
        Sam Account Name: insightiq
                     UID: 15
                     SID: S-1-22-1-15
                 Enabled: Yes
                 Expired: No
                  Expiry: -
                  Locked: No
                   Email: -
                   GECOS: InsightIQ User
           Generated GID: No
           Generated UID: No
           Generated UPN: Yes
           Primary Group
                          ID: GID:15
                        Name: insightiq
          Home Directory: /ifs/home/insightiq
        Max Password Age: -
        Password Expired: No
         Password Expiry: -
       Password Last Set: -
        Password Expires: Yes
              Last Logon: -
                   Shell: /usr/sbin/nologin
                     UPN: insightiq@UNIX_USERS
User Can Change Password: No
   Disable When Inactive: No
Dolphins971-1# echo "Please enter username to test" ; read user && echo "Please enter user's password" ; read -s pw; isi_test_pam -u ${user} -p ${pw}

Please enter username to test
insightiq
Please enter user's password
Got username insightiq



If customer has not already reset password on the day of running this KB this AP can be simplified to 
# isi auth users reset-password insightiq   <<<<< this step creates temp one time password
# isi auth users change-password insightiq  <<<<< this step user creates permanent new password different from reset-password