P.S. Novell OES for NetWare.
> Hi, all!
>
> I cannot change my password:
> +--------------------------------------------------+
> | $ passwd |
> | passwd: Changing password for dmelnik |
> | Enter existing login password: |
> | New Password: |
> | Re-enter new Password: |
> | passwd: dmelnik does not exist. |
> | LDAP password information update failed: Success |
> | |
> | Permission denied |
> +--------------------------------------------------+
>
> Ethereal shows that when client requests uid along with
> password attributes (userPassword, shadowMin, shadowMax,
> and so long), server replies with uid only.
> Can it be the matter? If not, what else?
>
> What I have:
> server: Novell OES and eDirectory 8.7.3.5.
> client: SPARC Solaris 9 9/05, pam_ldap-182, openldap-2.3.21,
> openssl-0.9.7i
>
> pam_ldap built as follows:
> $ CPPFLAGS=-I/usr/local/ssl/include \
> LDFLAGS=-L/usr/local/ssl/lib \
> LIBS="-lsocket -lssl -lcrypto" \
> ./configure \
> --with-ldap-lib=openldap \
> --with-ldap-dir=/usr/local \
> --with-ldap-conf-file=/etc/ldap.conf \
> --with-ldap-secret-file=/etc/ldap.secret
>
> $ LDADD="-L/usr/local/ssl/lib -lgcc_s" make
>
> +----------- /etc/ldap.conf ----------------------------+
> | URI ldap://server.domain |
> | BASE o=company |
> | LDAP_VERSION 3 |
> | SCOPE sub |
> | TIMELIMIT 10 |
> | BIND_TIMELIMIT 1 |
> | PAM_FILTER objectclass=posixAccount |
> | PAM_LOGIN_ATTRIBUTE uid |
> | PAM_MEMBER_ATTRIBUTE member |
> | PAM_PASSWORD nds |
> | NSS_BASE_PASSWD o=company?sub |
> | NSS_BASE_SHADOW o=company?sub |
> | NSS_BASE_GROUP o=company?sub |
> | NSS_MAP_ATTRIBUTE uniqueMember member |
> | SSL start_tls |
> | TLS_CIPHERS TLSv1 |
> | TLS_CACERTDIR /usr/local/ssl/certs |
> | TLS_CACERTFILE /usr/local/ssl/certs/serverrootca.pem |
> +-------------------------------------------------------+
>
> +------------ /etc/pam.conf (excerpt) --------------------------------+
> | passwd auth sufficient pam_passwd_auth.so.1 |
> | passwd auth optional pam_ldap.so.1 use_first_pass |
> | |
> | passwd account requisite pam_roles.so.1 |
> | passwd account required pam_projects.so.1 |
> | passwd account binding pam_unix_account.so.1 server_policy |
> | passwd account required pam_ldap.so.1 |
> | |
> | passwd password required pam_dhkeys.so.1 |
> | passwd password requisite pam_authtok_get.so.1 |
> | passwd password requisite pam_authtok_check.so.1 |
> | passwd password sufficient pam_authtok_store.so.1 |
> | passwd password optional pam_ldap.so.1 use_first_pass |
> +---------------------------------------------------------------------+
