Re: Usermin Password change on YP/NIS

[Jamie C. <jca...@we...>]

Bjoern Krueger wrote:
> 
> Hi  everyone,  we finally managed to be able to authenticate users via
> NIS/YP, so they can login.
> 
> But when they change their password, they get a "successful" message,
> the password itself isn't changed though.
> 
> *wild  guess* Does suermin use the "passwd" command, and can I replace
> it with yppasswd?
> 
> I  have  attached our /etc/pam.d/usermin but I guess there is no error
> because  all  NIS users CAN login and read mail, etc, they just cannot
> change their password.
> 
> Any help greatly appreciated! :)
> We  want  to use usermin as "change your password server" because less
> people today want to understand UN*X command lines.
> 
> [root@linus log]# cat /etc/pam.d/usermin
> auth       required     /lib/security/pam_securetty.so
> auth       required     /lib/security/pam_stack.so service=system-auth
> auth       required     /lib/security/pam_nologin.so
> account    required     /lib/security/pam_stack.so service=system-auth
> password   required     /lib/security/pam_stack.so service=system-auth
> session    required     /lib/security/pam_stack.so service=system-auth
> session    optional     /lib/security/pam_console.so
> auth     required        pam_unix.so     shadow nullok
> account  required        pam_unix.so
> password required        pam_unix.so     shadow nullok use_authtok
> session  required        pam_unix.so
> 
> The  last  4  lines  are  c/p  from the usermin help page, login works
> without them, too.

Usermin uses the 'passwd' PAM service for changing the password, instead
of running the passwd or yppasswd command. It maybe possible to modify the
config for this service to do an NIS password change instead of a local
one, but I have never tried that myself ..

 - Jamie