[Bug 334795] [NEW] cannot change password

Michael Kofler michael.kofler at gmx.com
Thu Feb 26 09:48:56 UTC 2009

Public bug reported:

Ubuntu 9.04 daily as of Feb. 25th

- libpam-krb5 and libnss-ldap installed

- pam-auth-update used to select kerberos, unix and consolekit 
  (no ldap!, no cracklib)

I am able to login both locally and via Kerberos

but I am unable to change passwords, neither locally nor via Kerberos

attempt to change local password:

localaccount at uranus:~$ passwd
passwd: Permission denied
passwd: password unchanged

attempt to change password of kerberos user:

kerberosuser at uranus:~$ passwd
Current Kerberos password: *******
passwd: Authentication token manipulation error
passwd: password unchanged

/etc/pam.d/common-passwd as generated by pam-auth-update (comments removed):

password	requisite			pam_krb5.so minimum_uid=2000
password	[success=1 default=ignore]	pam_unix.so obscure use_authtok try_first_pass sha512
password	requisite			pam_deny.so
password	required			pam_permit.so

this manual setting works:

password        sufficient      pam_krb5.so   minimum_uid=2000
password        required        pam_unix.so   obscure try_first_pass sha512

** Affects: libpam-krb5 (Ubuntu)
     Importance: Undecided
         Status: New

cannot change password
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com

More information about the universe-bugs mailing list