[ug-bosug] Re: Forcing root user to follow the passwd construction rules

[Venky]

Hi Mike,

> I am running with b42A, and we modified the /etc/default/passwd
> file to enforce certain password restrictions (such as
> PASSLENGTH = 8 ).  
> 
> We modified this file the same way as we did it in the past in
> Solaris 10, except now whenever a non-root user attempts to
> change their password they get greeted with "Permission
> denied".

AFAIK, nothing has changed here since Solaris 10.  Can you enable
PAM debugging and see if something shows up?

You can turn on PAM debugging by creating the /etc/pam_debug file
with the following lines:

debug_flags = 0x17
log_facility = 22
log_priority = 7

You will also need to turn on debug logging in /etc/syslog.conf

*.debug     /var/log/pam.debug

Rergards,
Venky.