ldap user cannot change their own password in RHEL

Solution Verified - Updated -

Issue

  • When a user attempts to change their own password, they get the following error.
Password change failed. Server message: Failed to update password

The following in seen in /var/log/secure:

May 30 12:57:37 xxx sshd[26631]: Accepted password for username from ::1 port 39940 ssh2
May 30 12:57:37 xxx sshd[26631]: pam_unix(sshd:session): session opened for user username by (uid=0)
May 30 12:57:37 xxx sshd[26631]: error: ssh_selinux_setup_pty: security_compute_relabel: Invalid argument
May 30 12:57:37 xxx passwd: pam_unix(passwd:chauthtok): user "username" does not exist in /etc/passwd
May 30 12:58:33 xxx passwd: pam_unix(passwd:chauthtok): user "username" does not exist in /etc/passwd
May 30 12:58:33 xxx passwd: pam_sss(passwd:chauthtok): User info message: Password change failed. Server message: Failed to update password
May 30 12:58:33 xxx passwd: pam_sss(passwd:chauthtok): Password change failed for user username: 12 (Authentication token is no longer valid; new one required)

Environment

  • Red Hat Enterprise Linux (RHEL)
  • Red Hat Directory Server (RHDS) 9

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content