On Tue, 2004-05-11 at 19:31, Rudi Chiarito wrote: > On Tue, May 11, 2004 at 04:21:53PM -0300, Jean-Rene Cormier wrote: > > Why can't you setup PAM to change both the Kerberos and the shadow > > password? > > Then you need to handle the case when changing either (and not both of > them) fails. There's a few things that could be done for that, if you change your password while being disconnected you'll have to change it again to sync them when you'll connect back to the network. Or only allow users to change their password if they're connected to the network. Configuring PAM for either of these way shouldn't be too hard. I'm sure there are other ways to do it also. Jean-Rene Cormier
