pam ldap & passwd

From: Jef Peeraer (jef.peeraer_at_deadspam.com)
Date: 03/12/04


Date: Fri, 12 Mar 2004 14:06:17 GMT

i have a server with all users in ldap. works great. however, how can i
change a password from a user who forget his password with passwd. It (
passwd ) always asks for an ldap password to start with, eg
# passwd jpe
Changing password for jpe.
Enter login(LDAP) password:
Password change aborted
New password:
Bad password: too short
Re-enter new password:
You can only change local passwords.
passwd: Authentication information cannot be recovered

my passwd in pam says
# cat /etc/pam.d/passwd
#%PAM-1.0
auth required pam_unix2.so nullok
account required pam_unix2.so
#account sufficient pam_localuser.so
password required pam_pwcheck.so nullok
password required pam_unix2.so nullok use_first_pass use_authtok
#password required pam_make.so /var/yp
session required pam_unix2.so

jef



Relevant Pages

  • ldaplist -l passwd again
    ... solve the problem of any user being able to see shadow file entries by ... ldaplist -l passwd ... passwd: ldap files ... Could someone post a working ACL to me? ...
    (SunManagers)
  • Re: [PHP] Php coding help - Newbie question
    ... > I am having a site in PHP which I need to ... > The site deals with modifying / adding / deleting entries in a LDAP dir. ... > user's login & passwd. ... I don't see any reason to store the passwd and validate against ldap on ...
    (php.general)
  • Re: [SLE] OpenLDAP2 pam_ldap SuSE 8.2
    ... passwd: compat ldap ... password: use_ldap nullok ... >>option for account, auth and password management. ...
    (SuSE)
  • ! bad user in /var/cron/log
    ... Googling around, I've seen this mentioned with *LK* accounts, but this is ... the password for the user ldap has been set before the issue appeared. ... $ grep passwd /etc/nsswitch.conf ... If you are not the intended recipient be aware that any ...
    (SunManagers)
  • LDAP passwords not working / sol 9
    ... Having run /etc/sbin/directoryserver and idsconfig to configure an LDAP ... service on Solaris 9 and managed to import some data (passwd, shadow, group ...
    (SunManagers)