[SSSD] Failure to set password for new user in LOCAL database
David O'Brien
davido at redhat.com
Thu Nov 5 06:49:41 UTC 2009
David O'Brien wrote:
> [root at alice ~]# sss_useradd newUser02
> [root at alice ~]# getent passwd newUser02
> newUser02:x:505:505:newUser02:/home/newUser02:/bin/bash
> [root at alice ~]# passwd newUser02
> Changing password for user newUser02.
> passwd: Authentication token manipulation error
> [root at alice ~]#
>
> I've tried this with a couple of different users, using FQDN, etc., but
> always get the same error.
>
> [root at alice ~]# rpm -qi sssd
> Name : sssd Relocations: (not relocatable)
> Version : 0.8.0 Vendor: (none)
> Release : 0.2009102711gitaa5a562.fc11 Build Date: Wed 28 Oct 2009
> 01:10:59 AM EST
>
> I added the following to nsswitch.conf
> passwd: files sss
> shadow: files
> group: files sss
>
> sssd.conf is pretty basic.
>
> Found this in sssd.log:
> [sssd] [confdb_get_domain_internal] (0): Warning: enumeration parameter
> in LOCAL still uses integers! Enumeration is now a boolean and takes
> true/false values. Interpreting as true
> (something that needs fixing, but at the same time not something that
> would cause breakage, afaik)
>
> I don't know where else to look :(
>
Found it.
Lesson learned: be more careful updating pam.d/system-auth and restart
sssd after changes.
Sorry for the noise
--
David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189
http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git
"The most valuable of all talents is that of never using two words when
one will do."
Thomas Jefferson
More information about the sssd-devel
mailing list