Turned pam debugging on, I see this now: Feb 23 17:36:04 unknown passwd[1187]: [ID 293258 user.warning] libsldap: Status: 91 Mesg: openConnection: failed to initialize TLS security (An I/O error occurred during security authorization.) Feb 23 17:36:04 unknown passwd[1187]: [ID 293258 user.warning] libsldap: Status: 7 Mesg: Session error no available conn. Feb 23 17:36:04 unknown passwd[1187]: [ID 993883 user.debug] passwd_auth: __user_to_authenticate returned 13 Feb 23 17:36:04 unknown passwd[1187]: [ID 239966 auth.debug] PAM[1187]: pam_authenticate(29748, 0): error No account present for user Feb 23 17:36:04 unknown passwd[1187]: [ID 285619 auth.debug] ldap pam_sm_authenticate(passwd test), flags = 0 Feb 23 17:36:04 unknown passwd[1187]: [ID 647000 auth.debug] ldap pam_sm_authenticate(passwd test), AUTHTOK not set Feb 23 17:36:04 unknown passwd[1187]: [ID 239966 auth.debug] PAM[1187]: pam_authenticate(29748, 0): error Authentication failed Feb 23 17:36:04 unknown passwd[1187]: [ID 909073 auth.debug] PAM[1187]: pam_set_item(29748:authtok) Feb 23 17:36:04 unknown passwd[1187]: [ID 557867 auth.debug] PAM[1187]: pam_end(29748): status = Success Why would it fail to initialize TLS security? root works fine... Is there an env var I'm missing? --- Susan <logastellus@xxxxxxxxx> wrote: > Alright, I added that, didn't do anything though: > > -bash-3.00# grep passwd /etc/pam.conf > # passwd command (explicit because of a different authentication module) > passwd auth sufficient pam_passwd_auth.so.1 > passwd auth required pam_ldap.so.1 > passwd password sufficient pam_passwd_auth.so.1 > passwd password required pam_ldap.so.1 > > -bash-3.00$ passwd > passwd: Changing password for test > passwd: Sorry, wrong passwd > Permission denied > -bash-3.00$ passwd -r ldap > passwd: Changing password for test > passwd: Sorry, wrong passwd > Permission denied > -bash-3.00$ > > > > --- Pete Rowley <prowley@xxxxxxxxxx> wrote: > > > Susan wrote: > > > > ># passwd command (explicit because of a different authentication module) > > ># > > >passwd auth sufficient pam_passwd_auth.so.1 > > >passwd auth required pam_ldap.so.1 > > > > > > > > You have no password directives - auth is for authentication only. > > > > passwd password sufficient pam_passwd_auth.so.1 > > > > passwd password required pam_ldap.so.1 > > > > > > -- > > Pete > > > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@xxxxxxxxxx > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > > -- > Fedora-directory-users mailing list > Fedora-directory-users@xxxxxxxxxx > https://www.redhat.com/mailman/listinfo/fedora-directory-users > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users