I've quickly checked the archive and I can find people having trouble
with users changing their own password but not the other way around.
Here, users can change their own password without issue but root fails.
What do I need to do to allow root, using the passwd command on RHES 4,
to change user passwords?
I've tried setting rootbinddn in my /etc/ldap.conf file. Without an
/etc/ldap.secret file, I observe an error in my logs, complaining about
the missing ldap.secret file. When I create it, the error goes away but
the passwd command still fails with, "passwd: Authentication token
manipulation error". In the logs I can observe, "passwd[23689]:
pam_ldap: error trying to bind (Invalid credentials)." I've tried
placing the admin password in cleartext, and base64 in the ldap.secret
file.
Frankly, I'd rather root be prompted for the LDAP admin password than
the password be stored in a file anyways. Is this possible?
Long of the short, what do I need to configure to allow root to change
other user's LDAP passwords?
Best Regards,
Greg Copeland
Show replies by date