linux and ldap changing passwords?

I am running my final tests on a combination of OpenLDAP,
Samba PDC, Windows, linux, and various other unix boxes. I
have LDAP populated with data for my company, I can manage
LDAP, use it for ssh and other linux logins by modifying
/etc/pam.d/sshd, I can authenticate from a windows box and
log into that windows box getting my normal desktop, etc.
I can also change my password on the windows box and see
that password propagated to LDAP for other authentication
needs including logging into linux with the new password.
I'm having problems changing my password on linux, though.
As a normal user (I've not tried root, that account will
be local to each box) I use 'passwd' and get an error:

$ passwd
Changing password for user mikee.
passwd: Authentication token manipulation error

Any guesses what I need to change to make the changing
passwords on linux work back into ldap?

Mike

Red Hat Fedora Core 5
OpenLDAP 2.3.19

In news:H2ngh.75$(E-Mail Removed),
Mike <(E-Mail Removed)> wrote:

> I am running my final tests on a combination of OpenLDAP,
> Samba PDC, Windows, linux, and various other unix boxes. I
> have LDAP populated with data for my company, I can manage
> LDAP, use it for ssh and other linux logins by modifying
> /etc/pam.d/sshd, I can authenticate from a windows box and
> log into that windows box getting my normal desktop, etc.
> I can also change my password on the windows box and see
> that password propagated to LDAP for other authentication
> needs including logging into linux with the new password.
> I'm having problems changing my password on linux, though.
> As a normal user (I've not tried root, that account will
> be local to each box) I use 'passwd' and get an error:
>
> $ passwd
> Changing password for user mikee.
> passwd: Authentication token manipulation error
>
> Any guesses what I need to change to make the changing
> passwords on linux work back into ldap?

Do you have the required modules installed and entries in
/etc/nsswitch.conf, the /etc/pam.d/* and /etc/ldap.conf files?
http://enterprise.linux.com/enterpri....shtml?tid=129 or
http://docs.linux.com/article.pl?sid...&tid=14&tid=94

Mike wrote:
> I am running my final tests on a combination of OpenLDAP,
> Samba PDC, Windows, linux, and various other unix boxes. I
> have LDAP populated with data for my company, I can manage
> LDAP, use it for ssh and other linux logins by modifying
> /etc/pam.d/sshd, I can authenticate from a windows box and
> log into that windows box getting my normal desktop, etc.
> I can also change my password on the windows box and see
> that password propagated to LDAP for other authentication
> needs including logging into linux with the new password.
> I'm having problems changing my password on linux, though.
> As a normal user (I've not tried root, that account will
> be local to each box) I use 'passwd' and get an error:
>
> $ passwd
> Changing password for user mikee.
> passwd: Authentication token manipulation error
>
> Any guesses what I need to change to make the changing
> passwords on linux work back into ldap?
>
> Mike
>
> Red Hat Fedora Core 5
> OpenLDAP 2.3.19

You need smbldap-passwd which, on my Debian system, is in a package
called smbldap-tools.

Robert

On 2006-12-15, Patrick <(E-Mail Removed)> wrote:
> In news:H2ngh.75$(E-Mail Removed),
> Mike <(E-Mail Removed)> wrote:
>
>> I am running my final tests on a combination of OpenLDAP,
>> Samba PDC, Windows, linux, and various other unix boxes. I
>> have LDAP populated with data for my company, I can manage
>> LDAP, use it for ssh and other linux logins by modifying
>> /etc/pam.d/sshd, I can authenticate from a windows box and
>> log into that windows box getting my normal desktop, etc.
>> I can also change my password on the windows box and see
>> that password propagated to LDAP for other authentication
>> needs including logging into linux with the new password.
>> I'm having problems changing my password on linux, though.
>> As a normal user (I've not tried root, that account will
>> be local to each box) I use 'passwd' and get an error:
>>
>> $ passwd
>> Changing password for user mikee.
>> passwd: Authentication token manipulation error
>>
>> Any guesses what I need to change to make the changing
>> passwords on linux work back into ldap?
>
> Do you have the required modules installed and entries in
> /etc/nsswitch.conf, the /etc/pam.d/* and /etc/ldap.conf files?
> http://enterprise.linux.com/enterpri....shtml?tid=129 or
> http://docs.linux.com/article.pl?sid...&tid=14&tid=94
>

I am able to ssh and log into the console without having a
local account, so the files /etc/nsswitch.conf, /etc/pam.d/sshd,
and /etc/ldap.conf work. Also 'getent passwd' and ldapsearch
work without error. I'll look at the links, thanks.

Mike