Re: passwd

2019-11-20 Thread Samuel Sieb
On 11/20/19 11:03 AM, Patrick Dupre wrote: When I run nextcloud, I get: "the password you use to log in to your computer no longer matches that of your login keyring" It was not too much an issue when I was able to cancel the request, but for 2 days now, I am even not able kill the request. I h

Re: "passwd" by root for user fails with sssd,pam, ldap [SOLVED]

2013-07-23 Thread Gordon Messmer
On 07/23/2013 01:54 PM, Augustin Wolf wrote: I agree. The only acceptable solution would be one way hash, but this wouldn't be much help, unless OpenLdap supports it. If the system stored a one-way hash of a "password," and that hash were usable as an authentication token, then the one-way has

Re: "passwd" by root for user fails with sssd,pam, ldap [SOLVED]

2013-07-23 Thread Augustin Wolf
On 23 July 2013 16:39, Stephen Gallagher wrote: >> That means that either you need the admin's DN and plain-text >> password in a file (like the older PAM LDAP does) or you need the >> user to enter their own password (like both sssd and PAM LDAP do). So, unless using command "passwd", will prompt

Re: "passwd" by root for user fails with sssd,pam, ldap

2013-07-23 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/23/2013 01:20 AM, Gordon Messmer wrote: > On 07/22/2013 02:18 PM, Augustin Wolf wrote: >> Okay, it isn't safe to store root password in a file. By all my >> administrator heart I agree. But I don't see why you have to >> store it in a plain text

Re: "passwd" by root for user fails with sssd,pam, ldap

2013-07-22 Thread Gordon Messmer
On 07/22/2013 02:18 PM, Augustin Wolf wrote: Okay, it isn't safe to store root password in a file. By all my administrator heart I agree. But I don't see why you have to store it in a plain text file. Could you please expand on that? Because that's how LDAP works. In order to change a password

Re: "passwd" by root for user fails with sssd,pam, ldap

2013-07-22 Thread Augustin Wolf
On 22 July 2013 18:38, Stephen Gallagher wrote: Thanks for participating. > This is intentional behavior. SSSD is designed not to allow root on > the local system to change the passwords of the centrally-managed > users. The reason for this is that we would have to store credentials > for an LDAP

Re: "passwd" by root for user fails with sssd,pam, ldap

2013-07-22 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/20/2013 08:43 AM, Augustin Wolf wrote: > On 20 July 2013 10:52, William Brown > wrote: >>> For now, LDAP ACL was "turned off" - every user has manage >>> permission, >> Each user will have permission on their own ldap object they bind >> to, to

Re: "passwd" by root for user fails with sssd,pam, ldap

2013-07-20 Thread Augustin Wolf
On 20 July 2013 10:52, William Brown wrote: >> For now, LDAP ACL was "turned off" - every user has manage permission, > Each user will have permission on their own ldap object they bind to, to > change their passwords. > Root may not be able to bind to ldap, or roots object doesn't have the acl t

Re: "passwd" by root for user fails with sssd,pam, ldap

2013-07-20 Thread William Brown
On 20/07/2013, at 9:58 AM, Augustin Wolf wrote: > Hi list, > I have a user management in LDAP, as it works fine for user (can > login, do `passwd` to change his password, etc.) > But, root cannot change users password otherwise as via ldapmodify. Is > it normal behavior, or do I have some con