Change local linux password when joined to Active Directory
active-directory, linux, passwords
Solution
by default pam_krb5.so set the "minimun_uid" to 1000 in /etc/pam.d/common-* e.g.:
password [success=3 default=ignore] pam_krb5.so minimum_uid=1000
my user had uid=1001 and according to the default setup, kerberos took control (bad thing). In the other hand, the mapping for my AD users was in a higher range (/etc/samba/smb.conf):
idmap config * : range = 10000-40000
So, I adjusted the "minimun_uid" in /etc/pam.d/common-* to 10000, and now I'm happy :-)
Problem
I have a linux box: Linux vuappserver 2.6.32-5-686 #1 SMP Mon Oct 3 04:15:24 UTC 2011 i686 GNU/Linux I use SMB + windbind to join to and Active Directory But right now I try to add a local user: useradd test but when I try to change the password I receive this error: root@server:/home/vu# passwd test Current Kerberos password: passwd: Authentication token manipulation error passwd: password unchanged I checked the permissions of this files: -rw-r--r-- 1 0 0 1350 Apr 5 23:17 /etc/passwd -rw-r----- 1 0 42 941 Apr 5 23:17 /etc/shadow Any ideas? Thanks