#3426 IPA client cannot change AD Trusted User password
Closed: Fixed 7 years ago Opened 7 years ago by sbose.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1449731

IPA client cannot change AD Trusted User password

[root@vm-idm-012 ~]# rpm -q ipa-server ipa-client sssd
ipa-server-4.5.0-10.el7.x86_64
ipa-client-4.5.0-10.el7.x86_64
sssd-1.15.2-25.el7.x86_64

Console output:
[root@vm-idm-012 ~]# su pw1144518888@pne.qe
sh-4.2$
sh-4.2$ passwd
Changing password for user pw1144518888@pne.qe.
Current Password:
Password change failed. Server message: Old password not accepted.
passwd: Authentication token manipulation error

[root@vm-idm-012 ~]# tail -5 /var/log/secure
May 10 19:19:36 localhost su: pam_unix(su:session): session opened for user
pw1144518888@pne.qe by root(uid=0)
May 10 19:19:43 localhost passwd: pam_unix(passwd:chauthtok): user
"pw1144518888@pne.qe" does not exist in /etc/passwd
May 10 19:19:55 localhost passwd: pam_sss(passwd:chauthtok): User info message:
Password change failed. Server message: Old password not accepted.
May 10 19:19:55 localhost passwd: pam_sss(passwd:chauthtok): Authentication
failed for user pw1144518888@pne.qe: 4 (System error)
May 10 19:21:07 localhost su: pam_unix(su:session): session closed for user
pw1144518888@pne.qe

How reproducible:
100%

Actual results:
password change fails

Expected results:
password change succeeds.

Additional info:
Old bug https://bugzilla.redhat.com/show_bug.cgi?id=870238 with the same issue
was verified in Rhle 6.4 and sssd-1.9.2-24.el6

Metadata Update from @sbose:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1449731

7 years ago

Metadata Update from @sbose:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1449731

7 years ago

Metadata Update from @sbose:
- Issue assigned to sbose

7 years ago

Metadata Update from @sbose:
- Issue set to the milestone: None

7 years ago

Metadata Update from @sbose:
- Custom field patch adjusted to on

7 years ago

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.15.3

7 years ago

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4453

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Log in to comment on this ticket.

Metadata