If you get a VM that has SLES on it, if (for example) you create with a user that uses ssh certificate, and then execute a password reset that uses password, the ssh config will get patched to include password auth, and then fails when tries to restart the ssh service. For this reason, the password reset will not work.
The cause is that it's miss detecting the distribution and using "ssh" as the name of the service to be restarted, and not "sshd" like it should be on Suse.