|
From: Jamie C. <jca...@we...> - 2006-02-17 01:25:42
|
Make sure that in your PAM LDAP config file (/etc/pam_ldap/auth_ldap.conf on my system) that the binddn and rootbinddn parameters are set to your LDAP administration user, and that the passwords in the bindpw parameter and /etc/ldap.secret file are set to match. Otherwise PAM will connect to LDAP as the user who is changing his password, which will generally not be allowed. - Jamie On 17/Feb/2006 11:43 Khan, Mohammed [SMO] wrote .. > Jamie, now i am getting this error: > Feb 16 16:36:29 dublx09 l/usermin/changepass/changepass.cgi: pam_ldap: > error trying to bind as user "uid=mkhan,ou=People, dc=noam,dc=corp,dc=frk,dc=com" > (Invalid credentials) > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 2:10 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Hi, > That looks OK.. > Can LDAP users use the command-line passwd command to change their passwords? > > - Jamie > > -----Original Message----- > > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 10:07 am > Size: 2K > To: <web...@li...> > > Hi Jamie, > Here is my passwd file: Pls tell me what I am doing worng. > #%PAM-1.0 > password required pam_cracklib.so > password sufficient pam_ldap.so > password sufficient pam_unix.so > password required pam_deny.so > > > > Thanks > Mohammed > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:46 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that > Usermin's > Change Password module is setup to use PAM. > > - Jamie > > On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > > Hello Jamie, > > Do you know how can I use usermin to change my ldap password. Please > need > > your help. > > > > Thanks > > Mohammed > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Thursday, February 16, 2006 2:28 PM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > Did you set up /etc/pam.d/usermin as well? My last set of instructions > > only > > mentioned /etc/pam.d/webmin , sorry .. > > > > - Jamie > > > > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > > Hi Jamie, > > > Sorry to bug u sir. I am still getting the same error when login using > > > ldap user into usermin. Here is error: > > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user > unknown > > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; > > > logname= uid=0 euid=0 tty= ruser= rhost= > > > > > > And here is mt .ssh file > > > #%PAM-1.0 > > > auth required /lib/security/pam_securetty.so > > > auth required /lib/security/pam_nologin.so > > > auth required /lib/security/pam_env.so > > > auth sufficient /lib/security/pam_ldap.so > > > auth required /lib/security/pam_unix_auth.so use_first_pass # > set_secrpc > > > account required /lib/security/pam_unix.so > > > account required /lib/security/pam_nologin.so > > > session required /lib/security/pam_unix.so > > > session required /lib/security/pam_limits.so > > > > > > > > > Please lete me know.. > > > > > > Thanks > > > > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...]On Behalf Of Jamie > > > Cameron > > > Sent: Friday, February 17, 2006 1:04 AM > > > To: web...@li... > > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > > > > Hi, > > --- message truncated --- > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |