passwd

[Stephen Carville]

On Thu, 25 Aug 2005, Meadows, Andrew wrote:

> Nope..
> Firewall is on but no selinux

That was the most obvious so....

check the permissions on /usr/bin/passwd.  S/B something like:

-r-s--x--x  1 root root 19336 Sep  7  2004 /usr/bin/passwd

the passwd and shadow files:

-rw-r--r--  1 root root 1784 Feb 17  2005 /etc/passwd
-r--------  1 root root 1162 Feb 17  2005 /etc/shadow

If the above are all copacetic, try running passwd from strace as a user:

$ strace passwd

A blood sacrifice of a small mammal might help too :-)

> -----Original Message-----
> From: redhat-list-bounces at redhat.com
> [mailto:redhat-list-bounces at redhat.com] On Behalf Of Stephen Carville
> Sent: Thursday, August 25, 2005 10:30 PM
> To: General Red Hat Linux discussion list
> Subject: Re: passwd
>
> On Thu, 25 Aug 2005, Meadows, Andrew wrote:
>
>> Ok I need some help. I have RedHat 3 update4 installed on multiple
>> servers. I created some accounts for users with the root ID. When they
>
>> log in they cannot change their password. If they try with the passwd
>> command they receive this error message, passwd: Authentication token
>> manipulation error. I think this may have something to do with the
>> fact that I recently had to change the umask of root to 077 because of
>
>> auditors.
>> Any thoughts you have on whats going on or how to fix this would be
>> greatly appreciated.
>
> Did you enable selinux?
>
> --
> Stephen
>
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
> ********************************************
> This message is intended only for the use of the Addressee and
> may contain information that is PRIVILEGED and CONFIDENTIAL.
>
> If you are not the intended recipient, you are hereby notified
> that any dissemination of this communication is strictly prohibited.
>
> If you have received this communication in error, please erase
> all copies of the message and its attachments and notify us
> immediately.
>
> Thank you.
> ********************************************
>
>