Sponsored Content
Operating Systems Solaris nisplus and pam authentication Post 302150776 by Smiling Dragon on Wednesday 12th of December 2007 03:56:02 PM
Old 12-12-2007
That looks like it's doing a mandatory password change, the first prompt is to login, the next two is what you normally see when you run passwd (old password check, then new password to change to). Doen't look like a problem.

If they are getting this everytime then it's probably an issue with your password aging (have you checked that the settings are correct - not too short?)

If it's neither of these and no other users on the server are having issues, a lot of problems in NIS+ are due to sync problems Get them to leave it alone for one sync period without changing anything, then log in again.

If all else fails, delete their NIS creds and regenerate them.

While NIS (aka YP) is pretty solid, NIS+ is very buggy and unreliable on solaris, we've used it and will never do so again - piece of rubbish Smilie I'd recommend going to an alternate product (eg LDAP, control-S)
 

10 More Discussions You Might Find Interesting

1. Programming

PAM Authentication Sample

Hi, I am a Linux / Unix newbie c programmer. I have a c/c++ daemon server that will receive authentication (userid / password) from a windows client. All I want to do is authenticate the user via PAM API - i.e. user must exist on the Unix / Linux system + password must be validated. ... (1 Reply)
Discussion started by: vineshp
1 Replies

2. UNIX for Advanced & Expert Users

pam ldap limit authentication

I have a linux machine which authenticate users to ldap, this is working fine. But I would like to limit users that logon to the machines to just the system admins. The machines hosts different web sites which users accessed from there home directory like http://foo.mdx.ac.uk/~username At the... (0 Replies)
Discussion started by: hassan1
0 Replies

3. Solaris

Soalris 10 PAM Radius authentication Module

Hello Group, I'm facing Problem with the configuration of "***pam_radius_auth.so.1***" module to be integrated with Freeradius and Funk Steel Belted Radius. Both this radius servers are able to make "Access-Accept" packet. But the SSH or Telnet client is not able to login to the system with the... (0 Replies)
Discussion started by: ImpeccableCode
0 Replies

4. UNIX for Advanced & Expert Users

PAM authentication failure

My PAM module seems to work right but it fails in authentication. Althought it can't authenticate, the session module works and the software who uses it executes well. For example, when I login through "gdm" using pam to authenticate against an ldap server /var/log/auth.log shows Any... (1 Reply)
Discussion started by: capibolso
1 Replies

5. Red Hat

PAM configuration: Kerberos authentication and NIS authorization problem

Hi, I've configured two linux boxes to authenticate against Windows Active Directory using Kerberos while retrieving authorization data (uids, gids ,,,)from NIS. The problem I ran into with my PAM configuration is that all authentication attempts succeed in order.i.e. if someone tried his... (0 Replies)
Discussion started by: geek.ksa
0 Replies

6. SCO

Authentication problems with Active Directory/Samba/Winbind/Pam

Hi all. I'm having real trouble authenticating users against active directory for my SCO UnixWare 7.1.4 box running samba 3.0.24 (installed via Maintenance pack 4). I can list AD users/groups (after overcoming several hiccups) with wbinfo -g / wbinfo -u. I can use id to get a view an ad user ie:... (0 Replies)
Discussion started by: silk600
0 Replies

7. UNIX for Advanced & Expert Users

PAM authentication.

I have applied pam authentication for local users as highlighted in below file. # cat /etc/pam.d/system-auth #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth sufficient pam_unix.so... (0 Replies)
Discussion started by: pinga123
0 Replies

8. Solaris

SSH and PAM authentication issues on Solaris 10

This is a zone running Solaris 10u8 on a 6320 blade. The global zone is also running 10u8. One my users is attempting to change his password and getting a following screen: $ ssh remotesys Password: Warning: Your password has expired, please change it now. New Password: Re-enter new... (1 Reply)
Discussion started by: bluescreen
1 Replies

9. SuSE

PAM password change failed, pam error 20

Hi, I use a software which can create account on many system or application. One of resource which is managed by this soft his a server SUSE Linux Enterprise Server 10 (x86_64). patch level 3. This application which is an IBM application use ssh to launch command to create account in... (3 Replies)
Discussion started by: scabarrus
3 Replies

10. SuSE

Authentication with PAM

Hello all, I recently updated PAM policy files (pam_authz.policy) on HP-UX Servers with AD groups involving allowing and denying the certain groups.. Could anyone tell me what is the equivalent mechanism in SLES(Linux)? Is it possible to allow/deny AD group access with the SLES LDAP... (0 Replies)
Discussion started by: lcclaj0
0 Replies
dxchpwd(1X)															       dxchpwd(1X)

NAME
dxchpwd - Create or change password program SYNOPSIS
dxchpwd dxchpwd -r | -l dxchpwd [-r | -l] -q dxchpwd [-r | -l] -u username OPTIONS
If dxchpwd is invoked without any options, it is assumed that the current user's password is to be changed. The following options are also accepted: Tells dxchpwd that the password change is to be done for a Local user. This can be combined with the -u and -q options. Tells dxchpwd that the password change is to be done for a NIS user. This can only be done from a NIS master and can be combined with the -u and -q options. Tells dxchpwd to query the user for the user name of the account whose password is to be changed. Tells dxchpwd to change this user's password. DESCRIPTION
The dxchpwd command lets you change your password. When you invoke the dxchpwd command, the program prompts you for the old password and then for the new password. Next, the program asks you for the new password again, to verify that you have typed it correctly. Note that the passwords are not displayed on the screen. Your new password must meet the length requirements specified by the authorization database for the user whose password is being changed. If your system is running with enhanced security, you may have to choose a password from a list of randomly generated passwords or you may be prohibited from changing your password until its minimum lifetime has expired, as specified in the authorization database. EXAMPLES
The following example requests that the password be changed for user smith: dxchpwd -u smith FILES
Password file Protected Password Database dxchpwd executable SEE ALSO
X(1X), xdm(1X), passwd(1) dxchpwd(1X)
All times are GMT -4. The time now is 01:12 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy