Linux PAM and LDAP

[Sriram Rajan]

I am running several Redhat 9.0 Linux workstations that run OPENLDAP clients. I don't want local root to be able to change other user passwords. Also I want the old password be prompted before a user is allowed to change his password.

I am playing with PAM but haven't had any succees. Mainly because I don't understand PAM well enough.

Any ideas ?

Many thanks for your time.

Sriram

[Steven E. Protter]

Your best bet would be an NIS configuration. Then the user passwords would be controlled by the NIS master server.

Its somewhat complex but it can be done.

Making one of the Linux boxes an LDAP server might be a better way to go. You want central control and either suggestion can do it.

SEP

[Jerome Henry]

Hello,

Sure that LDAP server would be a good and not that hard way to go. ead Red hat advises on that at :
http://www.europe.redhat.com/documentation/rhl9/rhl-rg-en-9/ch-ldap.php3

They also have a few pages on pam. Maybe could your ead them too and let us know what exactly doesn't work on setting it up :
http://www.europe.redhat.com/documentation/rhl9/rhl-rg-en-9/ch-pam.php3
http://www.bb-zone.com/SLGFG/chapter25.html

J

[Vitaly Karasik_1]

see LJ articles :

http://www.linuxjournal.com/article.php?sid=6936

Regards,
Vitaly