To force a user to change passwords at next login, use the chage command
chage -d 0 $USER
Only downside is that this doesn’t seem to work with older versions of ssh (pre 4.0 I believe) that are using privilege separation. You’ll have to edit the sshd_config file and turn privilege separation off or, a much better solution, upgrade openssh.
