If some user does not remember his password, and is asking you to change it, you can do it via the command:

passwd username

But even if you set new password the user still

complaints he cannot logon, then you have to reset his unsuccessful login count via:

chsec -f /etc/security/lastlog -a "unsuccessful_login_count=0" -s "username"