search for: pam_sm_chauthtok

Okay, I'm confused again. They way you guys are talking about the conversation routine, it would seem that you think it is a way to fetch something from the user - like a new password. Is this possible? Does calling pam_chauthtok() cause the underlying pam_sm_chauthtok() eventually print something on stdout and read a new password from stdin (the socket to the client) using the conversation routine? If this is what is happening, then logically the bug is in the part of the conversation routine that isn't checking to see if stdin/stdout is a TTY before trying...

...wn to the underlying authentication module passwd: password unchanged ============ And the following gets printed to /var/log/auth.log:<http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO> ============ Apr 28 03:27:33 samba passwd[3394]: pam_winbind(passwd:chauthtok): [pamh: 0x2547c60] ENTER: pam_sm_chauthtok (flags: 0x4000) Apr 28 03:27:33 samba passwd[3394]: pam_winbind(passwd:chauthtok): username [VGASMB\dirbaio] obtained Apr 28 03:27:33 samba passwd[3394]: pam_winbind(passwd:chauthtok): getting password (0x00000021) Apr 28 03:27:36 samba passwd[3394]: pam_winbind(passwd:chauthtok): request wbcLogonU...

...cred): [pamh: 0x12345678] ENTER: pam_sm_setcred (flags: 0x0008) sshd[12346]: pam_winbind(sshd:setcred): PAM_REINITIALIZE_CRED not implemented sshd[12346]: pam_winbind(sshd:setcred): [pamh: 0x12345678] LEAVE: pam_sm_setcred returning 0 passwd: pam_winbind(passwd:chauthtok): [pamh: 0x09fc4b10] ENTER: pam_sm_chauthtok (flags: 0x4000) passwd: pam_winbind(passwd:chauthtok): username [user2] obtained passwd: pam_winbind(passwd:chauthtok): user 'user2' OK passwd: pam_winbind(passwd:chauthtok): getting password (0x00000021) passwd: pam_winbind(passwd:chauthtok): request failed: Must change password, PAM error...

Hi, freebsd-security. I have FreeBSD 5.3-STABLE. When I try to change user's password (via passwd) I recieve the following: passwd: entry inconsistent passwd: pam_chauthtok(): error in service module passwd: in pam_sm_chauthtok(): pw_copy() failed and password stays unchanged. There are no other errors in the authorization system at all. Contents of /etc/pam.d stayed unchanged (compared to /usr/src/pam.d) Permissions: /etc/group 644 root:wheel /etc/passwd 644 root:wheel /etc/master.passwd 600 root:wheel I have /usr/po...

Hi there, I just tried out OpenSSH3.0p1 running on Solaris 8 with PAM (--with-PAM). The problem was mentioned some time ago and is still there :-( When a password is expired you are prompted to change it now, enter your login password and after doing so you are instantly disconnected. I think this is a problem with PAM and not SSH, but how can I get a solution on this ? sshd is running without

...the application is not calling, or ignoring non-success return values of pam_acct_mgmt() yet still allowing access to the account, then the application has a gaping hole and is at fault. - A PAM module may defer authentication and authorization, in password-change-required situations, to pam_sm_chauthtok(3PAM), but if so it must: a) return PAM_SUCCESS from its pam_sm_authenticate(3PAM) _AND_ b) return PAM_NEW_AUTHTOK_REQD from its pam_sm_acct_mgmt(3PAM). Kerberos V and LDAP BIND type modules typically do this. If it does otherwise then it will either not support password aging o...

...d required" line. All of them exhibit the same behavior. I have been unable to find any debug or log information that sheds much light on this behavior. When the user attempts to change their password, this is what is shown in /var/log/secure.log: passwd[229]: in _openpam_check_error_code(): pam_sm_chauthtok(): unexpected return value 12 And this is what the user sees: $ passwd Changing password for <user>. passwd: authentication information is unavailable smbd.log shows nothing at all. If the user's password is changed using the root account, no errors of any kind are logged, and no smbp...

...f the coredump which is generated: #0 0xff142b6c in _free_unlocked () from /usr/lib/libc.so.1 #1 0xff142b24 in free () from /usr/lib/libc.so.1 #2 0xff354ed0 in nis_putpwnam () from /usr/lib/passwdutil.so.1 #3 0xff352db0 in __set_authtoken_attr () from /usr/lib/passwdutil.so.1 #4 0xfeda0ea8 in pam_sm_chauthtok () from /usr/lib/security/pam_authtok_store.so.1 #5 0xff303048 in run_stack () from /usr/lib/libpam.so.1 #6 0xff303474 in pam_chauthtok () from /usr/lib/libpam.so.1 #7 0x000118f4 in main () Any ideas or suggestions to debug this further? Does anyone have pam_smbpass working on Solaris? Than...

...ointer type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:518: error: syntax error before "int" nsswitch/pam_winbind.c:528: error: syntax error before "int" nsswitch/pam_winbind.c:540: error: syntax error before "int" nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:559: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c:636: warning: passing arg 3 of `pam_get_item' from incompatible pointer type gmake: *** [nsswitch/pam_winbind.po] Error 1

...tch/pam_winbind.c:396: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c: In function `pam_sm_acct_mgmt': nsswitch/pam_winbind.c:450: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:525: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c:601: warning: passing arg 3 of `pam_get_item' from incompatible pointer type Compiling nsswitch/wb_common.c with -fPIC Compiling lib/snprintf.c with -fPIC Linking...

...incomp nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:518: error: syntax error before "int" nsswitch/pam_winbind.c:528: error: syntax error before "int" nsswitch/pam_winbind.c:540: error: syntax error before "int" nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:559: warning: passing arg 2 of `pam_get_user' from incomp nsswitch/pam_winbind.c:636: warning: passing arg 3 of `pam_get_item' from incomp make: 1254-004 The error code from the last command is 1. Please let me know if some one has any clue how to go a...

...tch/pam_winbind.c:462: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c: In function `pam_sm_acct_mgmt': nsswitch/pam_winbind.c:534: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:612: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c:689: warning: passing arg 3 of `pam_get_item' from incompatible pointer type *** Error code 1 make: Fatal error: Command failed for target `nsswitch/pam_winbind.p...

...r type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:518: error: syntax error before "int" nsswitch/pam_winbind.c:528: error: syntax error before "int" nsswitch/pam_winbind.c:540: error: syntax error before "int" nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:559: warning: passing arg 2 of `pam_get_user' from incomp atible pointer type nsswitch/pam_winbind.c:636: warning: passing arg 3 of `pam_get_item' from incomp atible pointer type make: 1254-004 The error code from the last command is 1. Stop. Thanks...

...r type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:518: error: syntax error before "int" nsswitch/pam_winbind.c:528: error: syntax error before "int" nsswitch/pam_winbind.c:540: error: syntax error before "int" nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:559: warning: passing arg 2 of `pam_get_user' from incomp atible pointer type nsswitch/pam_winbind.c:636: warning: passing arg 3 of `pam_get_item' from incomp atible pointer type make: 1254-004 The error code from the last command is 1. Stop. Thanks...

Hello, I have the following problem: I have installed openssh-1.2.2 on FreeBSD 3.4-RELEASE. I intentionally did not took the FreeBSD port because it does not support PAM. My aim is to make sshd authenticate against a TACACS+ server using the pam_tacplus.so module shipped with FreeBSD. That works perfectly with this line in my /etc/pam.conf: login auth sufficient pam_tacplus.so

...h/pam_winbind.c:462: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c: In function `pam_sm_acct_mgmt': nsswitch/pam_winbind.c:534: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:612: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c:689: warning: passing arg 3 of `pam_get_item' from incompatible pointer type make: *** [nsswitch/pam_winbind.po] Error 1 TIA -Bob -- *************************...

All, The SAMBA version 3.0.21b expired password pam_winbind.so section perhaps might still have an issue. It seems to just be in some kind of loop and never completes the section in pam_winbind.c of pam_sm_chauthtok. See ssh (Solaris 4.2.p1 ssh) sequence below: ssh hermione Password: Changing password for leeraym (current) NT password: Re-enter new Password: Password: Password: tail -f /var/log/authlog: Feb 1 14:53:29 hermione pam_winbind[1153]: [ID 467601 auth.error] request failed: Must chan...

Hi, FreeBSD has excellent PAM-support, except for the passwd-command. The passwd-command gained PAM support quite a while ago, but there is a test preventing it from working with PAM. There have been outstanding PR's for this minor issue for years now, I think it's time this one got fixed. People find it frustrating that they can't change their passwords (LDAP etc), like they

...ointer type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:614: error: syntax error before "int" nsswitch/pam_winbind.c:624: error: syntax error before "int" nsswitch/pam_winbind.c:636: error: syntax error before "int" nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:656: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c:733: warning: passing arg 3 of `pam_get_item' from incompatible pointer type make: 1254-004 The error code from the last command is 1. Stop. You have mail in /u...

http://bugzilla.mindrot.org/show_bug.cgi?id=423 ------- Additional Comments From michael_steffens at hp.com 2002-11-02 02:40 ------- Created an attachment (id=162) --> (http://bugzilla.mindrot.org/attachment.cgi?id=162&action=view) Patch: Workaround for pw change in privsep mode (3.5.p1) ------- You are receiving this mail because: ------- You are the assignee for the bug, or are