libpam_ldap question and password change

[Bas van der Vlies <basv [at] sara.nl>]

Hello,

 I am trying to replace the PADL libpam_ldap software. My setup is:
  debian: lenny
  openldap: 2.4.11-1+lenny1
  nss-ldap: 0.7.2

I can login on the node with a LDAP user. The only problem is that i can
not change my password with this new pam_ldap module.

In the server log i get the following message:
{{{
Feb 16 14:23:15 master slapd[2883]: conn=132 op=28 PROXYAUTHZ
dn="uid=bastest,ou=users,dc=hpcv,dc=sara,dc=nl"
Feb 16 14:23:15 master slapd[2883]: conn=132 op=28 EXT
oid=1.3.6.1.4.1.4203.1.11.1
Feb 16 14:23:15 master slapd[2883]: conn=132 op=28 PASSMOD old new
Feb 16 14:23:15 master slapd[2883]: conn=132 op=28 RESULT oid= err=53
text=unwilling to verify old password
}}}

With the PADL pam_ldap module we can change the password but only the new
password is sent:
{{{
Feb 16 14:12:33 master slapd[2883]: conn=132 op=27 PROXYAUTHZ
dn="uid=bastest,ou=users,dc=hpcv,dc=sara,dc=nl"
Feb 16 14:12:33 master slapd[2883]: conn=132 op=27 EXT
oid=1.3.6.1.4.1.4203.1.11.1
Feb 16 14:12:33 master slapd[2883]: conn=132 op=27 PASSMOD new
Feb 16 14:12:33 master slapd[2883]: conn=132 op=27 RESULT oid= err=0 text=
}}}

Did i missed an option or is this a bug?


-- 
********************************************************************
*  Bas van der Vlies                    e-mail: basv@sara.nl       *
*  SARA - Academic Computing Services   Amsterdam, The Netherlands *
********************************************************************
--
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users