[ug-bosug] Re: Forcing root user to follow the passwd constructionrules

[Mike Lewis]

>> I am running with b42A, and we modified the /etc/default/passwd
>> file to enforce certain password restrictions (such as
>> PASSLENGTH = 8 ).
>>
>> We modified this file the same way as we did it in the past in
>> Solaris 10, except now whenever a non-root user attempts to
>> change their password they get greeted with "Permission
>> denied".
>
> AFAIK, nothing has changed here since Solaris 10.  Can you enable
> PAM debugging and see if something shows up?
>
> You can turn on PAM debugging by creating the /etc/pam_debug file
> with the following lines:
>
> debug_flags = 0x17
> log_facility = 22
> log_priority = 7
>
> You will also need to turn on debug logging in /etc/syslog.conf
>
> *.debug     /var/log/pam.debug
>
> Rergards,
> Venky.
>

My bad.  Turns out the problem wasn't with b42A, but rather with Trusted
Extensions.  I re-installed b42A and didn't have any problems with
changing passwords.

Thank you very much for the help with the pam_debug stuff, though, as it
did show that there were some problems in TX.

-- Mike

-- 
Michael Lewis -- Jackpine Technologies Corporation
1380 Corporate Center Curve, Suite 108, Eagan, MN 55121
(651)209-6042 -- mdl at JackpineTech.com