Change local linux password when joined to Active Directory -


i have linux box: linux vuappserver 2.6.32-5-686 #1 smp mon oct 3 04:15:24 utc 2011 i686 gnu/linux

i use smb + windbind join , active directory

but right try add local user:

useradd test

but when try change password receive error:

root@server:/home/vu# passwd test current kerberos password: passwd: authentication token manipulation error passwd: password unchanged

i checked permissions of files:

-rw-r--r-- 1 0 0 1350 apr 5 23:17 /etc/passwd -rw-r----- 1 0 42 941 apr 5 23:17 /etc/shadow

any ideas?

thanks

by default pam_krb5.so set "minimun_uid" 1000 in /etc/pam.d/common-*
e.g.:

password    [success=3 default=ignore]  pam_krb5.so minimum_uid=1000 

my user had uid=1001 , according default setup, kerberos took control (bad thing). in other hand, mapping ad users in higher range (/etc/samba/smb.conf):

idmap config * : range = 10000-40000 

so, adjusted "minimun_uid" in /etc/pam.d/common-* 10000, , i'm happy :-)


Comments

Popular posts from this blog

ios - iPhone/iPad different view orientations in different views , and apple approval process -

java Extracting Zip file -

C# WinForm - loading screen -