From owner-freebsd-questions@FreeBSD.ORG Thu Feb 17 23:18:06 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2D60116A4CE for ; Thu, 17 Feb 2005 23:18:06 +0000 (GMT) Received: from blaster.systems.pipex.net (blaster.systems.pipex.net [62.241.163.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8AE1E43D45 for ; Thu, 17 Feb 2005 23:18:05 +0000 (GMT) (envelope-from lewiz@fajita.org) Received: from black.fajita.org (81-179-234-232.dsl.pipex.com [81.179.234.232]) by blaster.systems.pipex.net (Postfix) with ESMTP id 548A4E0000C4 for ; Thu, 17 Feb 2005 23:18:03 +0000 (GMT) Received: from black.fajita.org (localhost [127.0.0.1]) by black.fajita.org (8.13.1/8.13.1) with ESMTP id j1HNI37B055559 for ; Thu, 17 Feb 2005 23:18:03 GMT (envelope-from lewiz@black.fajita.org) Received: (from lewiz@localhost) by black.fajita.org (8.13.1/8.13.1/Submit) id j1HNI3Xj055558 for questions@freebsd.org; Thu, 17 Feb 2005 23:18:03 GMT (envelope-from lewiz) Date: Thu, 17 Feb 2005 23:18:03 +0000 From: Lewis Thompson To: questions@freebsd.org Message-ID: <20050217231803.GA55267@black.fajita.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.8i Subject: nss_ldap, pam_krb5 and passwd. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Feb 2005 23:18:06 -0000 Hi, I have user accounts in LDAP and authentication is done via pam_krb5. nss_ldap is installed and configured in terms of /etc/nssswitch.conf. However, when I run passwd I receive the following message: passwd: Sorry, `passwd' can only change passwords for local or NIS users. Judging by pam_krb5(8) this module supports the changing of passwords and it is just passwd that is refusing to change a non-local (i.e. not in /etc/passwd) password. /etc/nssswitch.conf passwd: files ldap So, here's the question: can I work around this? Is there any way to make passwd change passwords for user accounts stored in LDAP? Maybe this will require some hacking of passwd.c? Thanks very much, -Lewis Thompson. -- I was so much older then, I'm younger than that now. --Bob Dylan, 1964. -| msn:lewiz@fajita.org | jabber:lewiz@jabber.org | url:www.lewiz.org |-