[Fedora-directory-users] allowing users to change their own passwords (solaris 10)

[Susan]

Turned pam debugging on, I see this now:

Feb 23 17:36:04 unknown passwd[1187]: [ID 293258 user.warning] libsldap: Status: 91  Mesg:
openConnection: failed to initialize TLS security (An I/O error occurred during security
authorization.)
Feb 23 17:36:04 unknown passwd[1187]: [ID 293258 user.warning] libsldap: Status: 7  Mesg: Session
error no available conn.
Feb 23 17:36:04 unknown passwd[1187]: [ID 993883 user.debug] passwd_auth: __user_to_authenticate
returned 13
Feb 23 17:36:04 unknown passwd[1187]: [ID 239966 auth.debug] PAM[1187]: pam_authenticate(29748,
0): error No account present for user
Feb 23 17:36:04 unknown passwd[1187]: [ID 285619 auth.debug] ldap pam_sm_authenticate(passwd
test), flags = 0 
Feb 23 17:36:04 unknown passwd[1187]: [ID 647000 auth.debug] ldap pam_sm_authenticate(passwd
test), AUTHTOK not set
Feb 23 17:36:04 unknown passwd[1187]: [ID 239966 auth.debug] PAM[1187]: pam_authenticate(29748,
0): error Authentication failed
Feb 23 17:36:04 unknown passwd[1187]: [ID 909073 auth.debug] PAM[1187]:
pam_set_item(29748:authtok)
Feb 23 17:36:04 unknown passwd[1187]: [ID 557867 auth.debug] PAM[1187]: pam_end(29748): status =
Success


Why would it fail to initialize TLS security?  root works fine...  Is there an env var I'm
missing?


--- Susan <logastellus at yahoo.com> wrote:

> Alright, I added that, didn't do anything though:
> 
> -bash-3.00# grep passwd /etc/pam.conf
> # passwd command (explicit because of a different authentication module)
> passwd  auth sufficient         pam_passwd_auth.so.1
> passwd  auth required           pam_ldap.so.1
> passwd  password sufficient     pam_passwd_auth.so.1
> passwd  password required       pam_ldap.so.1
> 
> -bash-3.00$ passwd
> passwd: Changing password for test
> passwd: Sorry, wrong passwd
> Permission denied
> -bash-3.00$ passwd -r ldap
> passwd: Changing password for test
> passwd: Sorry, wrong passwd
> Permission denied
> -bash-3.00$ 
> 
> 
> 
> --- Pete Rowley <prowley at redhat.com> wrote:
> 
> > Susan wrote:
> > 
> > ># passwd command (explicit because of a different authentication module)
> > >#
> > >passwd  auth sufficient         pam_passwd_auth.so.1
> > >passwd  auth required           pam_ldap.so.1
> > >  
> > >
> > You have no password directives - auth is for authentication only. 
> > 
> > passwd password sufficient pam_passwd_auth.so.1
> > 
> > passwd  password required           pam_ldap.so.1
> > 
> > 
> > -- 
> > Pete
> > 
> > > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users at redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > 
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> 
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com