Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I can't get passwd working pam_mysql. I get the following error when trying to passwd a user as root, passwd testuser

passwd: Authentication token manipulation error 
passwd: password unchanged

I also enabled verbose outputting with pam_mysql

passwd[6160]: pam_mysql - option verbose is set to "1"
passwd[6160]: pam_mysql - option user is set to "nss-root"
passwd[6160]: pam_mysql - option passwd is set to "blabla"
passwd[6160]: pam_mysql - option db is set to "auth"
passwd[6160]: pam_mysql - option table is set to "users"
passwd[6160]: pam_mysql - option usercolumn is set to "users.username"
passwd[6160]: pam_mysql - option passwdcolumn is set to "users.password"
passwd[6160]: pam_mysql - option statcolumn is set to "users.status"
passwd[6160]: pam_mysql - option crypt is set to "1"
passwd[6160]: pam_mysql - option md5 is set to "true"
passwd[6160]: pam_mysql - pam_mysql_close_db() called.
passwd[6160]: pam_mysql - pam_sm_chauthtok() called.
passwd[6160]: pam_mysql - pam_mysql_open_db() called.
passwd[6160]: pam_mysql - pam_mysql_open_db() returning 0.
passwd[6160]: pam_mysql - pam_sm_chauthtok() returning 0.
passwd[6160]: pam_mysql - pam_mysql_release_ctx() called.
passwd[6160]: pam_mysql - pam_mysql_destroy_ctx() called.
passwd[6160]: pam_mysql - pam_mysql_close_db() called.

This is my /etc/pam.d/common-password

password sufficient pam_unix.so nullok obscure md5 debug
password required pam_mysql.so verbose=1 user=nss-root passwd=blabla db=auth table=users      usercolumn=users.username passwdcolumn=users.password statcolumn=users.status crypt=1
password requisite pam_deny.so
password required pam_permit.so

The mysql nss-root user has update privileges on auth.users and I can login with the users defined in auth.users.

share|improve this question
add comment

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.