"Daniel Richard G." <sk...@iskunk.org> writes: > common-auth, first two lines:
> auth [success=2 default=ignore] pam_krb5.so > auth [success=1 default=ignore] pam_unix.so nullok_secure > try_first_pass > common-password, first two lines: > password requisite pam_krb5.so > password [success=1 default=ignore] pam_unix.so obscure use_authtok > try_first_pass sha512 > So why does the stock config have pam_krb5!password as "requisite" > instead of "success=end"? Is this a pam_cracklib thing? I don't recall off the top of my head. I think it's always been that way from the original version contributed by Steve Langasek. Note that by removing minimum_uid but leaving the requisite, you've broken any password changes for the local root account, but that's presumably not your current problem.... -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/> -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334795 Title: cannot change password -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs