-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 magic wrote: > Florin wrote: > >> Howdi, >> >> Simply send me an email and explain what's going on ... and I will try to >> fix the problem >> cheers, >> >> > > I have everything set to auth against pam (including saslauthd) which > should be pretty normal. (I used the ldap guide from mandrakesecure as a > guide). > > Prior to 164-1 being added to cooker, I was using 161-2 (currently > I've had to downgrade to 161-1.1 from mdk91 updates) and it is working > without issue. > > I have a few user accounts that exist as both a system user & ldap > user. Currently (using 161-1.1) when I use /usr/bin/passwd to change the > password of one of these users, the ldap password is updated (not the > password stored in /etc/shadow) which is correct behavior (as I believe). > > When I updated pam_ldap to 164-1 and tried to change passwords, the > system password is changed, and the ldap password is not (incorrect > behavior). I did not see anything logged to syslog about the failure > (and actually passwd didn't fail) its just that the ldap password was > not updated. > > Of note, 161-1.1 works with either version of nss_ldap (204-1.1 & > 207-1). I have had no issues with nss_ldap. I posted > /etc/pam.d/system-auth & passwd in original post, but can resend if > required. Sorry if this isn't much help, but I really haven't got a clue > were to look next.
Can you please try changing your password lines in /etc/pam.d/system-auth to use "use_first_pass" as an option to pam_ldap? If this does not work, please also try changing the order of the pam_unix and pam_ldap password lines. If this does change the behaviour, it may mean pam_ldap isn't reading /etc/pam.d/passwd correctly. Regards, Buchan - -- |--------------Another happy Mandrake Club member--------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/M94trJK6UGDSBKcRAnWEAJ9zzV7MMbIC17DDWZd0KeMb6uumOQCfffv8 xgbE1Z1Oi03d+DLb1oxJ5zI= =ANGG -----END PGP SIGNATURE----- ****************************************************************** Please click on http://www.cae.co.za/disclaimer.htm to read our e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy. ******************************************************************
