kravietz / pam_tacplus

TACACS+ protocol client library and PAM module in C. This PAM module support authentication, authorization (account management) and accounting (session management)performed using TACACS+ protocol designed by Cisco.
GNU Lesser General Public License v3.0
132 stars 100 forks source link

`passwd` not working properly after libpam-tacplus install #130

Open johnderoc opened 5 years ago

johnderoc commented 5 years ago

Not sure if this is a Debian issue or not, but the moment I run apt-get install libpam-tacplus, the passwd executable doesn't work properly. After installing tacplus, when I run passwd it outputs "passwd: password updated successfully" without prompting me for a new password. This happens on different versions of Debian I've tried, from 8.5 through Debian 10.

tylersiemers commented 4 years ago

Did you ever find a solution to this? Seeing the same thing on Ubuntu 18.04 LTS

root@testhost:~/pam_tacplus# passwd test passwd: password updated successfully

tylersiemers commented 4 years ago

Update. Must be missing some settings to tell it to allow local user to manipulate the passwd. As a temp workaround you can:

sudo pam-auth-update

Deselect tacacs from the list, select OK, change password and re-enable.