Hello,

I need to be able to reset a LDAP user's password if they forget it with the user root.  But when I try the "passwd" command as root for a LDAP user,  I get the following:

(as root)
passwd tuser
Changing password for user tuser.
Password reset by root is not supported.
passwd: Authentication token manipulation error.

I am using sssd as the LDAP authentication mechanism tool, to be specific.  Does anyone have a solution to dealing with this issue of resetting a LDAP user's password if they forgot it?

Thanks,

Rohit

From: <Chaudhari>, "Rohit K. Chaudhari" <rohit.chaudhari@jhuapl.edu>
Date: Tuesday, January 21, 2014 3:29 PM
To: "General discussion list for the 389 Directory server project." <389-users@lists.fedoraproject.org>
Subject: using passwd with 389

Hello,

I want to be able to use the Unix "passwd" command to reset a LDAP user's password from the command line.  However, I keep getting an authentication token manipulation error whenever I try to reset the password using that command.  What do I need to do in the 389 DS or on Unix in order to get this command to work?

Thanks,

Rohit