Can't change password

[juno2]

The user can't use the command "passwd" to change the password,
the error is
#passwd
Changing password for edpuser
(current) UNIX password:
#passwd passwd: Authentication token manipulation error,
how to fix it ? thx

[Balaji N · Accepted solution]

hi,
what is the distro u are running.

did a bit of googling and discovered that this is a bug with PAM supplied with RHL 7.0 and looks pretty old. the link is below.

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=27552

also, if pls run up2date to get update with the latest list of patches.

hth
-balaji

[U.SivaKumar_2]

Hi,

Please do this as root.

#chmod u+s /usr/bin/passwd

Try again as that user to change the password.

HOpe your problem is solved.

regards,

U.SivaKumar

[Steven E. Protter]

Under red hat 7.x if you try and change a password to an insecure name, you will be deneied the right to do that.

root can, the user can't

You you try and change a password of user schmo to orange1 as user schmo, Linux will not allow that.

A secure password has at least one number, at least one capital letter and is not based on a dictionary word.

I make the following challenge.

Create a couple of users on a Linux with passwords like orange1 or other dictionary words.

send me a copy of the /etc/passwd file at stevenprotter@juf.org

I will crack those passwords in less than an hour.

SEP

[juno2]

Hi all,
I used U.SivaKumar's method , it still can't ,
besides, the error is not because my password too simple , it just don't allow to change password , thx.

[Balaji N]

what distro and version are u running. did u check out the pam error?

hth
-balaji

[Sergejs Svitnevs]

Did you changed anything in /etc/pam.d/ ?

Try this for /etc/pam.d/passwd:

auth required /lib/security/pam_unix.so
account required /lib/security/pam_unix.so
password required /lib/security/pam_cracklib.so difok=2 minlen=8
dcredit=2 ocredit=2 retry=3
password required /lib/security/pam_unix.so md5 shadow use_authtok

Then reboot.

Sergejs

[juno2]

Hi all,

I use RH 7.2

the content of the file /etc/pam.d/passwd is

auth required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_stack.so service=system-auth
password required /lib/security/pam_stack.so service=system-auth

is it OK ? thx.

[juno2]

I changed the file mode of the file /usr/bin/passwd to

-r-S--x--x 1 root root 13476 Aug 7 2001 passwd ,
but still can't let the user to change their password, can suggest how to solve it? thx.

[U.SivaKumar_2]

Hi,

NOT OK..... ;-)

Should be -r-s--x--x

Again

#chmod u+s /usr/bin/passwd

Please use small "s" not capital "S".


regards,

U.SivaKumar

[juno2]

I have run the statemnt "chmod u+s /usr/bin/passwd "

but the mode is still capital letter "S" , how can make it to small letter ? thx.

[Balaji N]

hi,
i think the passwd binary doesnt have execute permission.

how about trying this.

chmod 4555 /usr/bin/passwd.

or
chmod +x /usr/bin/passwd
chmod u+x /usr/bin/passwd


hth
-balaji

[Gopa]

hi,

check for any wrong entry in /etc/shadow. the file.

regds
Gk

[M. Jansink]

Hi,

you could also check if someone changed the atrributes on your files.

# lsattr /usr/bin/passwd
# lsattr /etc/passwd
# lsattr /etc/shadow

There should be NON set on these files.