Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1882
  • Last Modified:

passwd permission denied

Hello

I have joined my Solaris 10 u6 box to my Win 2003 AD domain using the following process
http://nineproductions.com/technology/1-sun-solaris/3-solaris-10-samba-zfs-configuration.html

now when i run  'passwd -r files root' i get
'passwd -r files root
New Password:
Permission denied'

this applies to all local user accounts on the Solaris system.

Any suggestions?
0
f3tpadmin
Asked:
f3tpadmin
  • 2
1 Solution
 
f3tpadminAuthor Commented:
Just to add another piece of info,  I found out that the line

'other   password required       pam_winbind.so'

in /etc/pam.conf seems to be causing the problem...  but not sure what the solution is.
0
 
Brian UtterbackPrinciple Software EngineerCommented:
How did you determine that the problem is with pam_winbind? What do you get as output from "wbinfo -u" and
"wbinfo -g"?
0
 
f3tpadminAuthor Commented:
wbinfo -u and wbinfo -g gives me the correct users and groups of my AD domain.

I determined it was pam_winbind as it works with password management.

It was set to required, the solution was to set it to sufficient.  This has to do with how PAM authentication works, with sufficient if winbind.so fails, the operation fails unless a module             invoked after it succeeds. Important to note is that if a 'required'             module fails before a 'sufficient' one succeeds, the operation will             fail anyway, ignoring the status of any 'sufficient' modules.

All is well now.



# Default definition for  Password management
# Used when service name is not explicitly mentioned for password management
#
other   password required       pam_dhkeys.so.1
other   password requisite      pam_authtok_get.so.1
other   password requisite      pam_authtok_check.so.1
other   password sufficient     pam_winbind.so
other   password required       pam_authtok_store.so.1

Open in new window

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now