Just as long as you remember that whenever you send a user a password in an (insecure) email, you should tell your client to log in as soon as possible and change the password to something else.
Try
# man mkpasswd
on RHL systems it should tell you how to automate password generation. We use it, and we're happy with it.
Jeff