Re: Replacing passwd?

From: Ivan Voras (ivoras_at_fer.hr)
Date: 11/18/04

  • Next message: Daniel Eriksson: "DEVFS problems" 
    Date: Thu, 18 Nov 2004 18:17:47 +0100
To: Dan Nelson <dnelson@allantgroup.com>

    Dan Nelson wrote:
    > In the last episode (Nov 18), Ivan Voras said:
    > passwd just uses PAM to set passwords, so the cleanest way would be to

    I see in the source that it calls some pam_* functions (I'm not an
    expert...), so it should probably be documented in the man page.

    > have a pam_smb module that does the password changes, and add it to
    > /etc/pam.d/passwd , or maybe tell have pam_ldap do it.

    The LDAP user entry contains both password used for unix (userPassword)
    and NT passwords (sambaNTPassword, sambaLMPassword) - can PAM modules be
    "stacked" to update all those fields? (if so, how? :) )

    I still feel that installing pam_smb would not be a good idea since I'm
    authenticating on the FreeBSD machine just fine using only pam_ldap.
    _______________________________________________
    freebsd-current@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-current
    To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"

  • Next message: Daniel Eriksson: "DEVFS problems"

    Relevant Pages

    • Re: Password aging on Suns with NIS?
      ... coding your own PAM module isn't an option for you ... > sources so they'd be the PAM-aware along with the whole PAM ... to change password. ... passwords and disabling accounts for those that don't. ...
      (comp.security.unix)
    • Re: passwords not recognized when suing from a terminal
      ... the passwords are no longer accepted. ... I can still login OK from the initial login ... You may also want to turn on some 'debug' option flag in the pam modules. ... # Uncomment the following line to implicitly trust users in the "wheel" group. ...
      (Fedora)
    • Re: Null passwords
      ... I've cruised through all of the configuration files I can think of, and I've read two manuals and a bunch of HowTo's about PAM's and security. ... I'm interested in where the templates for passwords are set, and how to eliminate them entirely, partly to minimize the impact on my family of what I'm doing, and partly to understand how the whole thing works. ... The documentation suggests that "nullok" works as a password argument in PAM, but I haven't found a placement in any of the service stacks that works yet. ...
      (Fedora)
    • Re: bug in passwd authentication in AIX
      ... Not on AIX. ... At least according to my recent chat with IBM tech support. ... In short - even with PAM and even on 5.3 you can only have 8 char ... IBM, I got a feature request - long passwords, please! ...
      (comp.unix.aix)
    • Re: Prompted for new password at every log in!
      ... even though I had set passwords to ... They couldnt change their passwords either, ... The password policies had been reinstated ... expire for passwords. ...
      (microsoft.public.windows.server.sbs)