Solved

passwd permission denied

Posted on 2009-04-07
3
1,834 Views
Last Modified: 2013-12-21
Hello

I have joined my Solaris 10 u6 box to my Win 2003 AD domain using the following process
http://nineproductions.com/technology/1-sun-solaris/3-solaris-10-samba-zfs-configuration.html

now when i run  'passwd -r files root' i get
'passwd -r files root
New Password:
Permission denied'

this applies to all local user accounts on the Solaris system.

Any suggestions?
0
Comment
Question by:f3tpadmin
  • 2
3 Comments
 

Author Comment

by:f3tpadmin
ID: 24091061
Just to add another piece of info,  I found out that the line

'other   password required       pam_winbind.so'

in /etc/pam.conf seems to be causing the problem...  but not sure what the solution is.
0
 
LVL 22

Expert Comment

by:blu
ID: 24096308
How did you determine that the problem is with pam_winbind? What do you get as output from "wbinfo -u" and
"wbinfo -g"?
0
 

Accepted Solution

by:
f3tpadmin earned 0 total points
ID: 24096529
wbinfo -u and wbinfo -g gives me the correct users and groups of my AD domain.

I determined it was pam_winbind as it works with password management.

It was set to required, the solution was to set it to sufficient.  This has to do with how PAM authentication works, with sufficient if winbind.so fails, the operation fails unless a module             invoked after it succeeds. Important to note is that if a 'required'             module fails before a 'sufficient' one succeeds, the operation will             fail anyway, ignoring the status of any 'sufficient' modules.

All is well now.



# Default definition for  Password management
# Used when service name is not explicitly mentioned for password management
#
other   password required       pam_dhkeys.so.1
other   password requisite      pam_authtok_get.so.1
other   password requisite      pam_authtok_check.so.1
other   password sufficient     pam_winbind.so
other   password required       pam_authtok_store.so.1

Open in new window

0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If, like me, you have a lot of Dell servers in the estate you manage this article should save you a little time. When attempting to login to iDrac on any server I would be presented with two errors. The first reads "Do you want to run this applicati…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question