From owner-freebsd-questions@FreeBSD.ORG  Thu Aug  7 02:53:35 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4B4E737B401
	for <freebsd-questions@freebsd.org>;
	Thu,  7 Aug 2003 02:53:35 -0700 (PDT)
Received: from elessar.nousoft.org (nousoft.org [213.41.136.188])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 67FC443FBD
	for <freebsd-questions@freebsd.org>;
	Thu,  7 Aug 2003 02:53:34 -0700 (PDT)
	(envelope-from thomas-ml@deniau.org)
Received: from [192.168.1.1] (localhost [127.0.0.1])
	by elessar.nousoft.org (Postfix) with SMTP id E5D8F4AF96B
	for <freebsd-questions@freebsd.org>;
	Thu,  7 Aug 2003 11:53:32 +0200 (CEST)
To: freebsd-questions@freebsd.org
In-Reply-To: <1fzbk34.gz3hse1yzumh3M%thomas-ml@deniau.org>
From: thomas-ml@deniau.org (Thomas Deniau)
Date: Thu, 7 Aug 2003 11:53:32 +0200
Message-ID: <1fzbkwe.1t3pdsymcudlkM%thomas-ml@deniau.org>
Organization: Nousoft
User-Agent: MacSOUP/2.5b2 (Mac OS X version 10.2.5)
Subject: Re: nss_ldap in -CURRENT
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Aug 2003 09:53:35 -0000

> But when I try to change a pass for a LDAP user I get :
> passwd: Sorry, `passwd' can only change passwords for local or NIS
> users.

That's actually strange.....

>From /usr/src/usr.bin/passwd/passwd.c :

        /* check where the user's from */
        switch (pwd->pw_fields & _PWF_SOURCE) {
        case _PWF_FILES:
                fprintf(stderr, "Changing local password for %s\n",
                    pwd->pw_name);
                break;
        case _PWF_NIS:
                fprintf(stderr, "Changing NIS password for %s\n",
                    pwd->pw_name);
                break;
        default:
                /* XXX: Green men ought to be supported via PAM. */
                errx(1,
          "Sorry, `passwd' can only change passwords for local or NIS
users.");
        }


So it doesn't want to change passwords for non-local users.
However, if you take a look at this source file, after these lines come
a bunch of PAM calls...

So, is it safe to comment out the errx and recompile passwd ?

-- 
Thomas Deniau
"Unix is user friendly. It's just selective when choosing friends."