User can successfully login through pam_ldap, but when they tried change password, it failure.. bash-2.04$ passwd Enter login(LDPA) password: New UNIX password: Retype new Unix password: LDAP password information update failed: Success passwd: Authentication token manipulation error bash-2.04$ On Client: ldap.conf: host host1.mydomain.com base dc=host1,dc=mydomain,dc=com binddn cn=root,dc=host1,dc=mydomain,dc=com bindpw secret port 389 pam_password crypt nss_base_passwd ou=People,dc=host1,dc=mydomain,dc=com nss_base_shadow ou=People,dc=host1,dc=mydomain,dc=com nss_base_group ou=People,dc=host1,dc=mydomain,dc=com On Server: slapd.conf include /home/apps/openldap-2.0.7/etc/openldap/schema/core.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/cosine.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/corba.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/inetorgperson.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/java.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/krb5-kdc.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/misc.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/nadf.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/nis.schema include /home/apps/openldap-2.0.7/etc/openldap/schema/openldap.schema pidfile /var/run/slapd.pid argsfile /home/apps/openldap-2.0.7/var/slapd.args database ldbm suffix "dc=host1,dc=mydomain,dc=com" rootdn "cn=root,dc=host1,dc=mydomain,dc=com" rootpw secret directory /home/apps/openldap-2.0.7/var/opeldap-ldbm index cn,sn,uid pres,eq,eq index objectClass eq loglevel 512 any help will be appreciated. thanks
