could you post your sudoers file, maybe you have a error there that you cannot spot. And the error message a user gets when trying to change a password.
These things would probably help...

No I have not play with any thing else.... My knowladge is limited but enough to administrate the server.

Here is how my sudoers file looks like....


##################################################################################
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification
Host_Alias SERVERS=servername_here
# User alias specification
User_Alias MIS=username_here, username_here, username_here, username_here

# Cmnd alias specification
Cmnd_Alias SHELLS=/usr/bin/sh, /usr/bin/ksh
Cmnd_Alias SU=/usr/bin/su
Cmnd_Alias KILL=/usr/bin/kill
Cmnd_Alias ADDUSER=/usr/sbin/adduser
Cmnd_Alias SHELL=/usr/sbin/usermod
Cmnd_Alias PTMKUSER=/pti/pt.profile/pt-shell/ptmkuser
Cmnd_Alias APDOSREAD=/pti/pt.profile/pt-shell/apdosread
# Defaults specification
Defaults syslog=auth
Defaults>root !set_logname
Defaults:username_here !authenticate
Defaults lecture
Defaults@SERVERS log_year, logfile=/var/log/sudo.log
# User privilege specification
root ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
# %MIS ALL=(ALL) ALL
MIS SERVERS=(ALL) KILL, ADDUSER, SHELL, PTMKUSER, APDOSREAD
#####################################################################################


I made some changes so I wont display the real usernames....

Hope the problem lies on my side not a bug...

Still with the same problem...
I am puzzled!
Not even tech support can figure this one out...

Not even tech support can figure this one out
Interesting.

Please post:
- General package verification. If any result of the command lists /etc/pam.d config files, please post them here. If there's any binaries listed check the checksum, access rights and ownership:
rpm -Vv --noscripts passwd pam sudo | grep "[M5UG]\{1\}.*"
- Some PAM syslogging. Check syslog.conf for which logfile to grep and use zgrep on the compressed ones:
grep -e "(_pwdb|_unix).*(pass|acct)" /var/log/messages
- the *exact* steps you take to enable or disable users being able to run /usr/bin/passwd?
- the exact errors shown in the case where any regular user can't change his/her password? If there are none given: try to generate them yourself as regular user. If there still are none: run password as regular user like this: strace -v -o /tmp/passwd.strace /usr/bin/passwd and post the contents of /tmp/passwd.strace.

Out of curiosity, what are the properties on your password file. They should look something like this:

-rws--x--x 1 root bin 37880 2004-06-21 14:20 /usr/bin/passwd*

If it doesn't have -rws--x--x on the permissions, you need to do a 4711 on the file.

Will post the above info when I get to work...