[nycbug-talk] Change password at next login?

[Tim A.]

Internal FreeBSD server, no outside access.
Using SSH with password authentication.

I would like to be able to reset someone's password and require them to 
change it at next login.

I looked at OPIE. I think that's going to be too complicated for my users.

Is there anything else that does this?

Also, is there someway to require a certain level of password complexity?

Of course, I'd prefer to setup some sort of ssh-key escrow management 
and avoid password authentication all together, if anyone out there's 
familiar with that.