[SSSD] Failure to set password for new user in LOCAL database

David O'Brien davido at redhat.com
Thu Nov 5 06:49:41 UTC 2009


David O'Brien wrote:
> [root at alice ~]# sss_useradd newUser02
> [root at alice ~]# getent passwd newUser02
> newUser02:x:505:505:newUser02:/home/newUser02:/bin/bash
> [root at alice ~]# passwd newUser02
> Changing password for user newUser02.
> passwd: Authentication token manipulation error
> [root at alice ~]#
> 
> I've tried this with a couple of different users, using FQDN, etc., but 
> always get the same error.
> 
> [root at alice ~]# rpm -qi sssd
> Name        : sssd                         Relocations: (not relocatable)
> Version     : 0.8.0                             Vendor: (none)
> Release     : 0.2009102711gitaa5a562.fc11   Build Date: Wed 28 Oct 2009 
> 01:10:59 AM EST
> 
> I added the following to nsswitch.conf
> passwd:     files sss
> shadow:     files
> group:      files sss
> 
> sssd.conf is pretty basic.
> 
> Found this in sssd.log:
> [sssd] [confdb_get_domain_internal] (0): Warning: enumeration parameter 
> in LOCAL still uses integers! Enumeration is now a boolean and takes 
> true/false values. Interpreting as true
> (something that needs fixing, but at the same time not something that 
> would cause breakage, afaik)
> 
> I don't know where else to look :(
> 
Found it.
Lesson learned: be more careful updating pam.d/system-auth and restart 
sssd after changes.

Sorry for the noise

-- 

David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189

http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git


"The most valuable of all talents is that of never using two words when
one will do."
     Thomas Jefferson



More information about the sssd-devel mailing list