I've recently set up an SFTP server for a number of people and their projects. For security reasons, people were given system accounts so they have no SSH access (we don't want them to accidentally modify files, install anything, or run programs; accounts were created with the command
adduser --system --no-create-home USERNAME). One consequence of this is that they are unable to change or set their passwords on their own. Essentially they have to email me the password they want, or they have to physically be in the same room so I can SSH in and they can use my computer to change their password.
Neither is a great option for us. So is there anything I've missed? Is there some way a user with a system account can manage their own password remotely? Alternatively, was it a bad idea to set them up as system accounts? I'd rather not change the setup right now, but if there's a better option I am able to.