* [2008-05-25 05:15:40 +0000] Dick Gevers wrote:

>>Hmm... I shutdown my cooker vm so can't check and have to run out real
>>quick, but what are the ownership/perms of the passwd program?
>
># stat /usr/bin/passwd
> File: `/usr/bin/passwd'
> Size: 20220       Blocks: 48      IO Block: 4096  regular file
>Device: 806h/2054d    Inode: 796887    Links: 1
>Access: (2711/-rwx--s--x) Uid: (   0/   root)  Gid: (  25/ shadow)
>Access: 2008-05-25 01:47:08.000000000 +0000
>Modify: 2008-05-20 03:12:04.000000000 +0000
>Change: 2008-05-20 20:38:46.000000000 +0000

Ok, with shadow passwords in use:

[root@(protected)
nsswitch.conf  nsswitch.conf~
[root@(protected)
# shadow: files nis
shadow:    files ldap
[root@(protected)
[root@(protected)
Changing password for user jack.
New UNIX password:
Retype new UNIX password:
passwd: all authentication tokens updated successfully.

Hmmm... ok, I've duplicated it. With tcb auth, you do get this.

I'll see what I can come up with.

--
Vincent Danen @ http://linsec.ca/