-- The following answer was provided by a user on those forums: --
Quote:
thank you very much. pam.conf was the problem. As I neither did the setup nor the updates I can only gues but it looks like someone "played" with the pam.conf and made additional entries. With the last patchbundle came additional stuff into this file and this caused the problems.
The other node in the cluster had not a modified pam.conf and there the patchbunde worked perfect. First time I`m happy that the nodes in these clusters have different setups...
Last edited by otheus; 11-13-2009 at 07:10 AM..
Reason: Included relevant quote from the forum posting
Okay, REMOVE the line in pam.conf that refers to pam_chauthtok. It's probably unnecessary.
Look, PAM has three parts: a configuration file, a set of modules which do the hard work, and an API for applications (like "passwd" and "login") to interface to. Each application can use PAM how it wants, but there are general guidelines everyone follows. First, each application will go through PAM's "auth" service, which authenticates the user of the application. This is where "passwd" asks for your existing password and then uses each module that is configured in "pam.conf" (for "passwd" program) and invokes the "auth" service for all modules listed in the "auth" service; a failure in any one of the required modules will fail the whole service. Then, the "passwd" program will ask you for your new password (twice) and will then invoke the "password" service for each module listed in pam.conf for the passwd program under the "password" service; again, a failure for any required module will fail the whole service. In your case the failure is for a module failing to load. I suspect the chauthtok module is not really needed. So you can remove the line in pam.conf that says something like:
Now, if I'm wrong, one possibility is that passwd will fail "silently". That is, it will tell you it worked, when in fact, no change to the shadow file was actually made. In this case, it might be that pam_chauthtok was removed or that it is another module here that is needed.
I commented the line " passwd password required libpam_unix.so.1 "
That line should STAY in.
Quote:
/etc/shadow file nor /etc/pam_chauthtok
I don't understand why you have no shadow file. Perhaps this is not a feature in HPUX. /etc/pam_chauthtok wouldn't exist. Is there a /etc/pam.d/passwd file?
Now that I've seen your pam.conf file, tThe whole thing sounds fishy. I'll bring this one to the attention of someone more versant in HPUX than myself.
hi
Actually the normal user as the permission of executing the passwd command due to suid program... eg consider the two users (normal user) as tom & jerry! when tom executes command as " passwd tom" no issue here...
In the same way when the same user tom uses the command as "passwd jerry" ... (1 Reply)
Hi,
I am using solaris 10. i am facing a strange problem regarding os passwd. i have a user oracle with passwd abc123
when i open a putty session with the os using abc123 it logs on. but if i use abc123!@# it agian log on without passwd error.
I came to know about the issue that if i... (5 Replies)
This is the source code:
#include <pwd.h>
#include <iostream>
#include <string.h>
using namespace std;
int main()
{
struct passwd *user;
char login="alex", password="qwertyuiop";
if ((user= getpwnam(login)) == NULL)
cout << "No such user\n";
else if... (24 Replies)
Hello to everybody i have question i do the
passwd -s -a commando and what to knos what is the meaning
of the second row.
PS
NL
LK
to the side is the date of expiraton and then a 7 a 90 what is the meaning of all that? tHANK YOU FOR YOUR TIME. (1 Reply)
My goal is to protect the /etc/passwd from unauthorized viewing. I wish ti change the permissions of the file to :
-r--r----- 1 root bin
so only root or accounts of the "bin" group could query this sensitive file. All our other processes have been ajusted to not need any info from... (16 Replies)
hai friends i have deleted passwd command using rm command i thought it will come again at the time of rebooting but it is completely deleted how to get it worked again (5 Replies)
Hi.
When i execute
which passwdit is showing /usr/bin/passwd, eventhough i set my path as
PATH=/etc:$PATH
i just checked the permission for the passwd under /usr/bin
-r-sr-sr-x
what exactly happening? and what is that s signifies
Thanks. (5 Replies)
I have a one line bat script run off a XP machine that tar's and compresses some files from a Sol 8 box. It goes something like this (a bit simplified)....
plink -pw <passwd> user@host "tar -cvf - -C / tmp/a_file | compress " > a_file.tar.Z
So this works....and it's worked many times. But now... (3 Replies)
Now I face a problem in changing the NIS passwd,I have no idea,want you to help me!
Today I add some user in the NIS master server ,I "vi" /etc/passwd &/etc/shadow,add user account and password by hand(shadow----no password ,only eight ":").
when finsh,I login ,system told me to input a password... (3 Replies)