Turned pam debugging on, I see this now:
Feb 23 17:36:04 unknown passwd[1187]: [ID 293258 user.warning] libsldap: Status: 91
Mesg:
openConnection: failed to initialize TLS security (An I/O error occurred during security
authorization.)
Feb 23 17:36:04 unknown passwd[1187]: [ID 293258 user.warning] libsldap: Status: 7 Mesg:
Session
error no available conn.
Feb 23 17:36:04 unknown passwd[1187]: [ID 993883 user.debug] passwd_auth:
__user_to_authenticate
returned 13
Feb 23 17:36:04 unknown passwd[1187]: [ID 239966 auth.debug] PAM[1187]:
pam_authenticate(29748,
0): error No account present for user
Feb 23 17:36:04 unknown passwd[1187]: [ID 285619 auth.debug] ldap
pam_sm_authenticate(passwd
test), flags = 0
Feb 23 17:36:04 unknown passwd[1187]: [ID 647000 auth.debug] ldap
pam_sm_authenticate(passwd
test), AUTHTOK not set
Feb 23 17:36:04 unknown passwd[1187]: [ID 239966 auth.debug] PAM[1187]:
pam_authenticate(29748,
0): error Authentication failed
Feb 23 17:36:04 unknown passwd[1187]: [ID 909073 auth.debug] PAM[1187]:
pam_set_item(29748:authtok)
Feb 23 17:36:04 unknown passwd[1187]: [ID 557867 auth.debug] PAM[1187]: pam_end(29748):
status =
Success
Why would it fail to initialize TLS security? root works fine... Is there an env var
I'm
missing?
--- Susan <logastellus(a)yahoo.com> wrote:
Alright, I added that, didn't do anything though:
-bash-3.00# grep passwd /etc/pam.conf
# passwd command (explicit because of a different authentication module)
passwd auth sufficient pam_passwd_auth.so.1
passwd auth required pam_ldap.so.1
passwd password sufficient pam_passwd_auth.so.1
passwd password required pam_ldap.so.1
-bash-3.00$ passwd
passwd: Changing password for test
passwd: Sorry, wrong passwd
Permission denied
-bash-3.00$ passwd -r ldap
passwd: Changing password for test
passwd: Sorry, wrong passwd
Permission denied
-bash-3.00$
--- Pete Rowley <prowley(a)redhat.com> wrote:
> Susan wrote:
>
> ># passwd command (explicit because of a different authentication module)
> >#
> >passwd auth sufficient pam_passwd_auth.so.1
> >passwd auth required pam_ldap.so.1
> >
> >
> You have no password directives - auth is for authentication only.
>
> passwd password sufficient pam_passwd_auth.so.1
>
> passwd password required pam_ldap.so.1
>
>
> --
> Pete
>
> > --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
>
https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com