From owner-freebsd-questions@FreeBSD.ORG  Thu Aug  7 02:37:05 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id CABFC37B401
	for <freebsd-questions@freebsd.org>;
	Thu,  7 Aug 2003 02:37:05 -0700 (PDT)
Received: from elessar.nousoft.org (nousoft.org [213.41.136.188])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E365843FA3
	for <freebsd-questions@freebsd.org>;
	Thu,  7 Aug 2003 02:37:04 -0700 (PDT)
	(envelope-from thomas-ml@deniau.org)
Received: from [192.168.1.1] (localhost [127.0.0.1])
	by elessar.nousoft.org (Postfix) with SMTP
	id AADEF4AF936; Thu,  7 Aug 2003 11:37:02 +0200 (CEST)
To: sheepkiller@cultdeadsheep.org (Clement Laforet)
In-Reply-To: <20030807011747.33a104af.sheepkiller@cultdeadsheep.org>
From: thomas-ml@deniau.org (Thomas Deniau)
Date: Thu, 7 Aug 2003 11:37:02 +0200
Message-ID: <1fzbk34.gz3hse1yzumh3M%thomas-ml@deniau.org>
Organization: Nousoft
User-Agent: MacSOUP/2.5b2 (Mac OS X version 10.2.5)
cc: freebsd-questions@freebsd.org
Subject: Re: Fw: Re: nss_ldap in -CURRENT
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Aug 2003 09:37:06 -0000

> 10. id <user> to test

OK, things work up to this step. "su" works too. Thank you !
(the symlink thing was missing)

Now I'm trying to implement password changes....

I've put

password        sufficient      /usr/local/lib/pam_ldap.so
password        required        pam_unix.so             no_warn
try_first_pass nullok


in /etc/pam.d/passwd


But when I try to change a pass for a LDAP user I get :
passwd: Sorry, `passwd' can only change passwords for local or NIS
users.

The logs show me that the LDAP query returned the correct value.

Any clue ?

-- 
Thomas Deniau
"Unix is user friendly. It's just selective when choosing friends."