samba - Oct 2021 - pam_winbind(passwd:chauthtok): valid_user: wbcGetpwnam gave WBC_ERR_DOMAIN_NOT_FOUND

Hello All,

trying to set a password for newly created nagios user with
uid=3972,gid=3972

but getting the following:

# passwd nagios
Current Kerberos password:
Current Kerberos password:
passwd: Authentication token manipulation error
passwd: password unchanged

auth.log shows:
Oct 25 13:22:39 myserver passwd[2055]: pam_winbind(passwd:chauthtok):
valid_user: wbcGetpwnam gave WBC_ERR_DOMAIN_NOT_FOUND

can it be somehow solved?

cat common-auth|grep -v '^$'|grep -v ^\#
auth    [success=3 default=ignore]      pam_krb5.so minimum_uid=1000
auth    [success=2 default=ignore]      pam_unix.so nullok_secure
try_first_pass
auth    [success=1 default=ignore]      pam_winbind.so krb5_auth
krb5_ccache_type=FILE cached_login try_first_pass
auth    requisite                       pam_deny.so
auth    required                        pam_permit.so
auth    optional                        pam_cap.so


Thanks and kind regards,
Peter

On Mon, 2021-10-25 at 15:32 +0200, peter knezel via samba
wrote:
> Hello All,
> 
> trying to set a password for newly created nagios user with
> uid=3972,gid=3972
> 
> but getting the following:
> 
> # passwd nagios
> Current Kerberos password:
> Current Kerberos password:
> passwd: Authentication token manipulation error
> passwd: password unchanged
> 
> auth.log shows:
> Oct 25 13:22:39 myserver passwd[2055]: pam_winbind(passwd:chauthtok):
> valid_user: wbcGetpwnam gave WBC_ERR_DOMAIN_NOT_FOUND
> 
> can it be somehow solved?
> 
> cat common-auth|grep -v '^$'|grep -v ^\#
> auth    [success=3 default=ignore]      pam_krb5.so minimum_uid=1000
Change the '1000' above to the low value you set in smb.conf
'DOMAIN'
range.

It will also require altering in any pam files where it is set.

Rowland