Linux clients unable to change Open Directory Password.

[barry_001]

Hi,
We are using a 10.3.9 Xserve G5 as an LDAP server, Open Directory is running and both mac and linux (fedora3) clients are able to authenticate but only the macs are able to change their Open Directory password.

When a linux client tries to change the password e.g. with the passwd command, it indicates that the token has been changed but has only changed the LDAP userPassword and Password field values – the OD password remains unchanged.

I have only tested the linux client using ldap settings, unfortunately I haven’t been able to successfully use kerberos so the kerberos utilities are untested.

Has anybody had a similar problem ?
Can anyone offer advise on how to solve the problem so that linux commands (e.g. passwd) can be used to change the OD password ?

Many Thanks

[barry_001]

I used authconfig to change to ldap authentication, no customisation of nsswitch or pam.d files. If the mac based user has a crypt password there are no problems authenticating or changing the crypt password stored in the LDAP records.

When a user is changed to OD using WGM they enter their password on the admins WGM and can authenticate on the linux clients no problems. We just can’t change the OD password using the linux client.

Also used authconfig to set client authentication to kerberos but users couldn’t log into the client anymore. We don’t explicitly use kerberos so there could be any number of reasons why this fails, we don’t want to use kerberos we just thought this may provide an alternate route to the OD password server since kerberos is running on the OD server mac.

Thanks for your reply.

[jon]

Here we are in June 2006 and I still can’t get this to work.
It never worked on the Panther server and I am trying to get it going on the new Tiger server we have on our test network.

Was there ever a comprehensive solution to this posted ? Google isn’t helping.

Jon

[jon]

Sorry no, not using Kerberos, too big a can o’worms.

[Anonymous]

Ok now we’re using Kerberos. 😀

kpassword username@HOST.DEPARTMENT.DOMAIN.EDU.AU

It took a little fiddling as we had a migration from Panther to Tiger on the server, but now it goes.
Just had to tick the Use Kerberos option in Authconfig.
I pity the OS that hath not Authconfig.

Jon

[Author]

Posts