David O'Brien wrote:
[root@alice ~]# sss_useradd newUser02
[root@alice ~]# getent passwd newUser02
newUser02:x:505:505:newUser02:/home/newUser02:/bin/bash
[root@alice ~]# passwd newUser02
Changing password for user newUser02.
passwd: Authentication token manipulation error
[root@alice ~]#
I've tried this with a couple of different users, using FQDN, etc., but
always get the same error.
[root@alice ~]# rpm -qi sssd
Name : sssd Relocations: (not relocatable)
Version : 0.8.0 Vendor: (none)
Release : 0.2009102711gitaa5a562.fc11 Build Date: Wed 28 Oct 2009
01:10:59 AM EST
I added the following to nsswitch.conf
passwd: files sss
shadow: files
group: files sss
sssd.conf is pretty basic.
Found this in sssd.log:
[sssd] [confdb_get_domain_internal] (0): Warning: enumeration parameter
in LOCAL still uses integers! Enumeration is now a boolean and takes
true/false values. Interpreting as true
(something that needs fixing, but at the same time not something that
would cause breakage, afaik)
I don't know where else to look :(
Found it.
Lesson learned: be more careful updating pam.d/system-auth and restart
sssd after changes.
Sorry for the noise
--
David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189
http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git
"The most valuable of all talents is that of never using two words when
one will do."
Thomas Jefferson