Solved

Normal user cannot change password while logged in locally

Posted on 2004-09-15
4
2,740 Views
Last Modified: 2013-12-27
I have a problem that I can't seem to resolve. It's a password issue.

I have a customer who wants to change his password, but cannot run "passwd" from his command console. The error message that is displayed is "unexpected failure. Password file/table unchanged".

However when he slogin or ssh, he can change the password just fine. He's running the command "passwd". So what's going on?

The machine is solaris 8 with X-windows, running on a Sun Blade 150. This machine is not part of an NIS domain.
0
Comment
Question by:toaster02
  • 2
4 Comments
 
LVL 34

Expert Comment

by:PsiCop
ID: 12067490
Are the shells different between the two environments? Perhaps an alias intercepting and futzing with the "passwd" command?
0
 
LVL 48

Expert Comment

by:Tintin
ID: 12069776
Assuming the user is running ksh, get them to type in

type passwd

from both login sessions.
0
 
LVL 38

Accepted Solution

by:
yuzh earned 500 total points
ID: 12071446
Please post the output of the following command:

grep -i passwd /etc/nsswitch.conf


also, have a look at the following Sun doc:

#--------------------------------------------------------------------------------------------------------
Document ID: 57592
Title: Document ID 57592
Synopsis: On Solaris Systems, Users May Not be Able to Change Their Password or Password Attributes Using the passwd(1) Command  
Update Date: 2004-08-13

--------------------------------------------------------------------------------
Description Top

Sun(sm) Alert Notification
Sun Alert ID: 57592
Synopsis: On Solaris Systems, Users May Not be Able to Change Their Password or Password Attributes Using the passwd(1) Command
Category: Availability
Product: Solaris
BugIDs: 4977110
Avoidance: Workaround, Patch
State: Resolved
Date Released: 30-Jun-2004, 12-Aug-2004
Date Closed: 12-Aug-2004
Date Modified: 12-Aug-2004
1. Impact
Under certain circumstances, users may not be able to change their password or password attributes using the passwd(1) command on Solaris 8 and Solaris 9 systems which utilize the "+/-" passwd syntax entries.

2. Contributing Factors
This issue can occur in the following releases:

SPARC Platform

Solaris 8 with patches 108993-32 through 108993-34 and without patch 108993-35
Solaris 9 with patches 113476-10 through 113476-13 or 112960-13 and without patch 112960-14
x86 Platform

Solaris 8 with patches 108994-32 through 108994-34 and without patch 108994-35
Solaris 9 with patches 114242-06 through 114242-08 and without patch 114242-09
Note: Solaris 7 is not affected by this issue.

The described issue only occurs if all of the following are true:

One of the patches listed above is installed on the system
/etc/nsswitch.conf(4) contains the entry "passwd: compat"
user accounts have passwd(4) entries that begin with a "+" (plus sign) or a "-" (minus sign)
Note: Password entries with a "+" or "-" selectively incorporate entries from a network repository (NIS, NIS+, or LDAP) for the password data.

To view the "passwd" entries in the nsswitch.conf(4) file, execute the following command:

    $ egrep "^passwd" /etc/nsswitch.conf
    passwd:     compat                                                                                    
3. Symptoms
If the described issue occurs, users may see the following error message when attempting to change their password:

    $ passwd
    passwd: Changing password for username
    passwd: Unsupported nsswitch entry for "passwd:". Use "-r repository ".
    Unexpected failure. Password file/table unchanged                                                                              
Solution Summary Top

4. Relief/Workaround
Users whose accounts are specified as +/- in the passwd(4) file can workaround this issue by specifying the repository to update with the "-r" option, such as:

    $ passwd -r nis
OR
    $ passwd -r nisplus
OR
    $ passwd -r ldap                                                                                    
5. Resolution
This issue is addressed in the following releases:

SPARC Platform

Solaris 8 with patch 108993-35 or later
Solaris 9 with patch 112960-14 or later
x86 Platform

Solaris 8 with patch 108994-35 or later
Solaris 9 with patch 114242-09 or later
Change History
19-Jul-2004:

Updated Contributing Factors and Resolution sections
12-Aug-2004:

State: Resolved
Updated Contributing Factors and Resolution sections.
#-----------------------------------------------------------------------------------------------------
From:
http://au.sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-57592-1
0
 
LVL 34

Expert Comment

by:PsiCop
ID: 12071648
And THAT is why yuzh is top dog 'round here.

*arf* *arf*
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using libpcap/Jpcap to capture and send packets on Solaris version (10/11) Library used: 1.      Libpcap (http://www.tcpdump.org) Version 1.2 2.      Jpcap(http://netresearch.ics.uci.edu/kfujii/Jpcap/doc/index.html) Version 0.6 Prerequisite: 1.      GCC …
FreeBSD on EC2 FreeBSD (https://www.freebsd.org) is a robust Unix-like operating system that has been around for many years. FreeBSD is available on Amazon EC2 through Amazon Machine Images (AMIs) provided by FreeBSD developer and security office…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question