LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 04-25-2014, 01:33 PM   #1
drwilkins
LQ Newbie
 
Registered: Apr 2014
Posts: 2

Rep: Reputation: Disabled
Users unable to change NIS passwords


I have a Fedora 20 NIS server with separate passwd and shadow maps (sourced from /etc) and running yppasswdd, with a set of Fedora 20 clients connecting to it.

Users are unable to change their own NIS passwords. If a standard user types yppasswd (on either a client or the NIS master server), after entering their new password, they get the error

crypt() call failed

Or, just using passwd, they get

NIS password could not be changed. passwd: Authentication token manipulation error

After entering and re-entering the new password.

On the other hand, logging in as root to the NIS master server and using "yppasswd username" works just fine - root is able to change NIS passwords using yppasswd.

How can I make it so users can change their own passwords?

Many thanks.
 
Old 04-26-2014, 07:41 AM   #2
eklavya
Member
 
Registered: Mar 2013
Posts: 633

Rep: Reputation: 141Reputation: 141
The yppasswd command changes (or installs) a network password and associates it with the name you specify in the UserName parameter. To create or change a password, you must be the owner of the password you want to change. The Network Information Services (NIS) password can be different from the one on your own machine. Root users on an NIS server can change the password of another user without knowing the user's original password. To do this, the Root user enters their password in place of the user's original password. Root users on an NIS client, however, do not have this privilege.

This error is being produced because you are using shadowed password files and the shadow doesn’t have entry for this user. i.e, /etc/passwd has an entry for this user, but /etc/shadow doesn’t.

The username in the /etc/passwd should be matched with /etc/shadow.
 
Old 04-26-2014, 10:06 AM   #3
drwilkins
LQ Newbie
 
Registered: Apr 2014
Posts: 2

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by eklavya View Post

This error is being produced because you are using shadowed password files and the shadow doesn’t have entry for this user. i.e, /etc/passwd has an entry for this user, but /etc/shadow doesn’t.

The username in the /etc/passwd should be matched with /etc/shadow.
I've just checked and the username in /etc/passwd matches that in /etc/shadow and, indeed, the usernames also match between the NIS maps passwd.byname and shadow.byname.

Could there be another cause of this error? And is it relevant that I have MERGE_PASSWD=false set in the yp makefile so that there are separate NIS passwd and shadow maps?
 
Old 04-28-2014, 01:56 AM   #4
eklavya
Member
 
Registered: Mar 2013
Posts: 633

Rep: Reputation: 141Reputation: 141
If user wants to change his own passwd, do not write username. Try with only yppasswd.
Quote:
$ yppasswd
If you are still facing the problem.
Check with rpasswd
 
1 members found this post helpful.
Old 04-28-2014, 06:25 AM   #5
linosaurusroot
Member
 
Registered: Oct 2012
Distribution: OpenSuSE,RHEL,Fedora,OpenBSD
Posts: 982
Blog Entries: 2

Rep: Reputation: 244Reputation: 244Reputation: 244
Quote:
Originally Posted by eklavya View Post
The username in the /etc/passwd should be matched with /etc/shadow.
On the client I would expect the user to be missing from both passwd and shadow for the NIS values to be used.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
A question about users changing passwords in a NIS environment... trist007 Linux - Newbie 4 08-13-2010 07:05 PM
Allow LDAP users to change passwords graystarr Linux - Server 1 03-10-2009 05:20 PM
Allowing users to change their own passwords kaplan71 Linux - Security 3 03-08-2007 10:32 AM
Cannot change NIS passwords in Squirrelmail zapperabhi Linux - Software 1 03-22-2004 11:08 PM
problem with users trying to change passwords erikm103 Linux - General 1 03-10-2003 05:10 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 03:18 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration