[Samba] PAM LDAP password change error

Tamás Pisch pischta at gmail.com
Wed Jul 1 08:56:02 GMT 2009


thanks for your advice. I set it, and the unix passwd sync too. I restored
the original /etc/pam.d/passwd file. This way it seems to work. Soon I will
test the installation with a Windows client too. One additional info: I use
smbldap-passwd instead of smbpasswd.

2009/6/25 Adam Williams <awilliam at mdah.state.ms.us>

> why not just use ldap passwd sync = yes, and then change passwords with
> smbpasswd?
> Tamás Pisch wrote:
>> Hi,
>> I go trough the SaMBa guide Making happy users secondly. I configure
>> Debian
>> Lenny on XEN.
>> I have problem with PAM. When i try to change a user's password with
>> smbldap-passwd it runs without error, but when i try to log in I get the
>> "Login incorrect" message. When I try to change a user's password with
>> passwd I get the "Authentication service cannot retrieve authentication
>> info" message.
>> I removed every ACLs from slapd.conf.
>> I tried to follow the second version of the PAM configuration, because as
>> I
>> see on Debian, the pam-unix2.so doesn't support ldap.
>> I didn't include pam_pwcheck.so, because it gave me an error about it
>> doesn't find that module.
>> /etc/pam.d/passwd:
>> auth     sufficient  pam_ldap.so
>> account  sufficient  pam_ldap.so
>> password sufficient    pam_ldap.so
>> password required    pam_unix2.so   nullok use_first_pass use_authtok
>> /etc/nsswitch.conf:
>> passwd:         files ldap
>> group:          files ldap
>> shadow:         files ldap
>> Thanks, in advance.

More information about the samba mailing list