Can't send to audit system: USER_CHAUTHTOK

davidkimberley · 09-21-2006, 05:59 AM

Please help, I have no hair left...

Ok so I am running - RH Enterprise 3.4.3-9.EL4

Kernel 2.6.9-42.EL on a HP Blade 64Bit AMD.

From a fresh build, ia have added users as normal with a default password, however when they login and try to change there password, they recieve the below:

passwd: Authentication token manipulation error

/var/log/messages is showing:

May 16 13:30:10 server01 unix_chkpwd[4018]: check pass; user unknown
May 16 13:30:10 server01 unix_chkpwd[4018]: password check failed for user (dkimberley)
May 16 13:30:10 server01 passwd(pam_unix)[4017]: authentication failure; logname=root uid=2122 euid=2122
tty=pts/2 ruser= rhost= user=dkimberley
May 16 13:30:12 server01 passwd[4017]: Can't send to audit system: USER_CHAUTHTOK pid=4017 uid=2122 logi
nuid=-1 message=passwd: password change failed - user=dkimberley, uid=2122

Any ideas?

Thanks

unSpawn · 09-23-2006, 04:37 AM

You mention a fresh install.
Did this happen right after install or after some time?
Was any of the installed software updated?
What does the PAM stack look like?
Did you make any changes to it?
What log output does running the PAM stack with debug flag give you?