"Daniel Richard G." <sk...@iskunk.org> writes:

> common-auth, first two lines:

>     auth      [success=2 default=ignore]      pam_krb5.so 
>     auth      [success=1 default=ignore]      pam_unix.so nullok_secure 
> try_first_pass

> common-password, first two lines:

>     password  requisite                       pam_krb5.so 
>     password  [success=1 default=ignore]      pam_unix.so obscure use_authtok 
> try_first_pass sha512

> So why does the stock config have pam_krb5!password as "requisite"
> instead of "success=end"? Is this a pam_cracklib thing?

I don't recall off the top of my head.  I think it's always been that way
from the original version contributed by Steve Langasek.  Note that by
removing minimum_uid but leaving the requisite, you've broken any password
changes for the local root account, but that's presumably not your current
problem....

-- 
Russ Allbery (r...@debian.org)               <http://www.eyrie.org/~eagle/>

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/334795

Title:
  cannot change password

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to