call pwconv before chpasswd