From owner-freebsd-current@FreeBSD.ORG Sun Nov 21 02:07:46 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9789C16A4CE for ; Sun, 21 Nov 2004 02:07:46 +0000 (GMT) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1FEAF43D31 for ; Sun, 21 Nov 2004 02:07:46 +0000 (GMT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.13.1/8.13.1) id iAL27jtu085754; Sat, 20 Nov 2004 20:07:45 -0600 (CST) (envelope-from dan) Date: Sat, 20 Nov 2004 20:07:45 -0600 From: Dan Nelson To: Dick Davies Message-ID: <20041121020745.GC94473@dan.emsphone.com> References: <419CD314.80900@fer.hr> <20041118171012.GB19265@dan.emsphone.com> <20041120222325.GC17297@lb.tenfour> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041120222325.GC17297@lb.tenfour> X-OS: FreeBSD 5.3-STABLE X-message-flag: Outlook Error User-Agent: Mutt/1.5.6i cc: FreeBSD Current Users Subject: Re: Replacing passwd? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Nov 2004 02:07:46 -0000 In the last episode (Nov 20), Dick Davies said: > * Dan Nelson [1110 17:10]: > > In the last episode (Nov 18), Ivan Voras said: > > > I've setup pam_ldap and nss_ldap and samba3 and smbldap, and it works > > > fine, but it would be nice to replace /usr/bin/passwd with > > > smbldap-passwd (which changes both NTLM and Unix password fields in > > > LDAP, while passwd is unaware of LDAP, at least according to man > > > page). Is there a clean way of doing it so I don't have to replace > > > it by hand after each installworld? > > > > passwd just uses PAM to set passwords > > When did that come in? I can't get passwd(1) to change an ldap password, I get: > > rasputnik@eris:rasputnik$ passwd > passwd: Sorry, `passwd' can only change passwords for local or NIS users. > rasputnik@eris:rasputnik$ uname -a > FreeBSD eris 5.3-STABLE FreeBSD 5.3-STABLE #4: Mon Oct 25 18:03:11 BST 2004 root@eris:/usr/obj/usr/src/sys/ERIS i386 > rasputnik@eris:rasputnik$ > > - this is an nss_ldap nsswitched account, logged in over ssh (pam_ldap auth). Weird. There's definitely a lot of PAM code in passwd.c. What happens if you comment out the errx() function that prints that error (line 124)? -- Dan Nelson dnelson@allantgroup.com