severity 396726 wishlist tags 396726 - wontfix thanks After deeper analysis, it appears that chpasswd does *not* use PAM for passwd changes but only for the calling user authentication and it cannot use PAM without breaking some of its options.
As a consequence, we conclude it is impossible for us (or shadow upstream) to have chpasswd update opasswd (which *has* to be done through pam_unix). We propose documenting this issue in chpasswd manpage as a way to warn admins about this. --
signature.asc
Description: Digital signature
