<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 01/11/2015 04:01 AM, Rakesh
Rajasekharan wrote:<br>
</div>
<blockquote
cite="mid:CANAMAkr0vp1HJy830n31OiEDS4-eZ3UjoB8G7CLiKxYUZiXWSA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>Hi,<br>
<br>
</div>
I am having some issues with freeipa. Whenever I change the
password for any user,<br>
</div>
<div>He is not able to change the password. and he gets error
"authentication token manipualtion error"<br>
<br>
Changing password for user hq-testuser.<br>
Current Password:<br>
New password:<br>
Retype new password:<br>
passwd: Authentication token manipulation error<br>
<br>
<br>
</div>
<div>I was able to get this running on another environment not
sure whats went wrong here.<br>
<br>
</div>
<div>I have migrated my exisitng users from openldap .<br>
</div>
</div>
</blockquote>
<br>
<br>
Does it happen for all users or only users that you migrated?<br>
<br>
Can you create a new user and set a password for him?<br>
If it does not work I suspect either something is wrong with either
krb5.conf or global password policy on the server.<br>
<br>
If it works for new users but not for migrated ones then compare the
entries of such users using ldap command and see what is different.<br>
<br>
<br>
<blockquote
cite="mid:CANAMAkr0vp1HJy830n31OiEDS4-eZ3UjoB8G7CLiKxYUZiXWSA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Thanks,<br>
Rakesh<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>