Change local linux password when joined to Active Directory -
i have linux box: linux vuappserver 2.6.32-5-686 #1 smp mon oct 3 04:15:24 utc 2011 i686 gnu/linux
i use smb + windbind join , active directory
but right try add local user:
useradd test
but when try change password receive error:
root@server:/home/vu# passwd test current kerberos password: passwd: authentication token manipulation error passwd: password unchanged
i checked permissions of files:
-rw-r--r-- 1 0 0 1350 apr 5 23:17 /etc/passwd -rw-r----- 1 0 42 941 apr 5 23:17 /etc/shadow
any ideas?
thanks
by default pam_krb5.so set "minimun_uid" 1000 in /etc/pam.d/common-*
e.g.:
password [success=3 default=ignore] pam_krb5.so minimum_uid=1000 my user had uid=1001 , according default setup, kerberos took control (bad thing). in other hand, mapping ad users in higher range (/etc/samba/smb.conf):
idmap config * : range = 10000-40000 so, adjusted "minimun_uid" in /etc/pam.d/common-* 10000, , i'm happy :-)
Comments
Post a Comment