From owner-freebsd-questions@FreeBSD.ORG Fri Jan 7 15:07:12 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3198916A4CE for ; Fri, 7 Jan 2005 15:07:12 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id A56A743D1F for ; Fri, 7 Jan 2005 15:07:11 +0000 (GMT) (envelope-from kc.somaratne@gmail.com) Received: by rproxy.gmail.com with SMTP id i8so252015rne for ; Fri, 07 Jan 2005 07:07:11 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:mime-version:content-type:content-transfer-encoding; b=U8RVImxTScwYR38vfylPwkMIxiT4ZsW6tyul9KUnvhcWGXiPTaON+sMKW2TN0LH3xiLLmZYTB67oPu5f7qvOJYRcWXlkp3Rc77UfNA1cxiLy1GctDYlmD/uXOsMMCEEjYzFyzMet6GuIJPmka3HUHZ82S+HycGGmeYBQPr0Abio= Received: by 10.38.92.60 with SMTP id p60mr118215rnb; Fri, 07 Jan 2005 07:07:10 -0800 (PST) Received: by 10.38.79.61 with HTTP; Fri, 7 Jan 2005 07:07:10 -0800 (PST) Message-ID: <9967ef07050107070731cee6b2@mail.gmail.com> Date: Fri, 7 Jan 2005 23:07:10 +0800 From: KC Somaratne To: kris@obsecurity.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: possible issue with pam X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: KC Somaratne List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jan 2005 15:07:12 -0000 On Tue, Dec 02, 2003 at 11:17:41PM -0500, Barry Hawkins wrote: >> List, >> Hello. I have recently begun to encounter an issue with changing >> passwords on my 5.1 installation. I haven't touched anything on it for >> a few months, and the last change-related activity I had were some >> portupgrade tasks to rid myself of the libintl.so.4 issue solved with >> "portupgrade -R gettext" back around September 2003. I am wondering if >> anyone has experienced an issue similar to mine. >> When I attempt to use passwd to change my password, I get the >> following upon successfully re-typing the password: >> >> passwd: entry inconsistent >> passwd: pam_chauthtok(): error in service module >> >> If anyone has insight on this I would be grateful. A search of the >> list for pam_chauthtok only revealed one person asking a similar >> question related to yppasswd. > > Compare your /etc/pam.d configuration against the sources in > /usr/src/etc/pam.d to make sure you have not damaged your pam > configuration by mis-merging changes. Also make sure you have no > /etc/pam.conf file, which was removed a long time ago. > > Kris Hi Kris, I've had a similar issue with a FreeBSD 5.2.1-RELEASE box for an account belonging to the 'wheel' group. I last changed the password for this account successfully roughly two months ago and since then I haven't changed anything at all. Now when I try to change the password for this account using root it prompts me with the below error message. root:/etc#passwd Changing local password for New Password: Retype New Password: passwd: entry inconsistent passwd: pam_chauthtok(): error in service module I get the same error message when trying to change the password using the same account as well. I have carefully verified that I did indeed enter the same string for the password verification. I have done the checks you have recommended in the above mail. The only differences are the /etc/pam.d has an additional file 'ftp'. The /usr/src/etc/pam.d contain two additional files Makefile & convert.pl. Appreciate any suggestions on what might be causing this behaviour and how I might be able to resolve the problem. Also, is this at all any sign of my system being compromised? Thanks in advance, -kc,