Solved

passwd permission denied

Posted on 2009-04-07
3
1,844 Views
Last Modified: 2013-12-21
Hello

I have joined my Solaris 10 u6 box to my Win 2003 AD domain using the following process
http://nineproductions.com/technology/1-sun-solaris/3-solaris-10-samba-zfs-configuration.html

now when i run  'passwd -r files root' i get
'passwd -r files root
New Password:
Permission denied'

this applies to all local user accounts on the Solaris system.

Any suggestions?
0
Comment
Question by:f3tpadmin
  • 2
3 Comments
 

Author Comment

by:f3tpadmin
ID: 24091061
Just to add another piece of info,  I found out that the line

'other   password required       pam_winbind.so'

in /etc/pam.conf seems to be causing the problem...  but not sure what the solution is.
0
 
LVL 22

Expert Comment

by:blu
ID: 24096308
How did you determine that the problem is with pam_winbind? What do you get as output from "wbinfo -u" and
"wbinfo -g"?
0
 

Accepted Solution

by:
f3tpadmin earned 0 total points
ID: 24096529
wbinfo -u and wbinfo -g gives me the correct users and groups of my AD domain.

I determined it was pam_winbind as it works with password management.

It was set to required, the solution was to set it to sufficient.  This has to do with how PAM authentication works, with sufficient if winbind.so fails, the operation fails unless a module             invoked after it succeeds. Important to note is that if a 'required'             module fails before a 'sufficient' one succeeds, the operation will             fail anyway, ignoring the status of any 'sufficient' modules.

All is well now.



# Default definition for  Password management
# Used when service name is not explicitly mentioned for password management
#
other   password required       pam_dhkeys.so.1
other   password requisite      pam_authtok_get.so.1
other   password requisite      pam_authtok_check.so.1
other   password sufficient     pam_winbind.so
other   password required       pam_authtok_store.so.1

Open in new window

0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

FreeBSD on EC2 FreeBSD (https://www.freebsd.org) is a robust Unix-like operating system that has been around for many years. FreeBSD is available on Amazon EC2 through Amazon Machine Images (AMIs) provided by FreeBSD developer and security office…
The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question