Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #201117 > unrolled thread

"passwd username" asks for current password of user even tho I'm root

Back to article view | Back to linux.debian.user

Contents

  "passwd username" asks for current password of user even tho I'm  root Mariusz Gronczewski <mgronczewski@efigence.com> - 2018-10-10 16:50 +0200
    Re: "passwd username" asks for current password of user even tho I'm  root Roberto C. Sánchez <roberto@debian.org> - 2018-10-10 16:50 +0200
    Re: "passwd username" asks for current password of user even tho I'm root Hans <hans.ullrich@loop.de> - 2018-10-10 17:00 +0200
    Re: "passwd username" asks for current password of user even tho I'm  root Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-10-10 17:50 +0200
    Re: "passwd username" asks for current password of user even tho I'm  root Dennis Wicks <wix@mgssub.com> - 2018-10-11 00:20 +0200

#201117 — "passwd username" asks for current password of user even tho I'm root

Hi,

On previous releases, and on our CentOS systems I could change password of user by just sudo-ing to root and typing "passwd testuser"

In current Debian release, doing that asks me to specify that user password, which is pointless because:

* I can access /etc/shadow anyway
* I'm changing it because user forgot it

Is there any way to set passwd (or PAM) to not ask root for current password on passwd-ing non-root accounts ?

Cheers

Mariusz

--
Mariusz Gronczewski, Administrator

Efigence S. A.
ul. Wołoska 9a, 02-583 Warszawa
T: [+48] 22 380 13 13
F: [+48] 22 380 13 14
E: mariusz.gronczewski@efigence.com <mailto:mariusz.gronczewski@efigence.com>

[toc] | [next] | [standalone]

#201118

On Wed, Oct 10, 2018 at 03:17:11PM +0200, Mariusz Gronczewski wrote:
> Hi,
> 
> On previous releases, and on our CentOS systems I could change password of user by just sudo-ing to root and typing "passwd testuser"
> 
> In current Debian release, doing that asks me to specify that user password, which is pointless because:
> 
> * I can access /etc/shadow anyway
> * I'm changing it because user forgot it
> 
> Is there any way to set passwd (or PAM) to not ask root for current password on passwd-ing non-root accounts ?
> 
Is your system configured to authenticate against LDAP, Kerberos, NIS,
or Active Directory.  Those are all instances where "root is not really
root."

Regards,

-Roberto

-- 
Roberto C. Sánchez

[toc] | [prev] | [next] | [standalone]

#201120 — Re: "passwd username" asks for current password of user even tho I'm root

Am Mittwoch, 10. Oktober 2018, 15:17:11 CEST schrieb Mariusz Gronczewski:
Hi,

as a normal user you should be able to change your password using "passwd 
testuser".

When you want to change an alien password,. obviously you should be root. 
Otherwise any user wopuld bve able to change anybodies password.

If you need another authoritive user for special things, add this user 
to /etc/sudoers and define the rules.

Hope I understood your problem correctly.

Best

Hans
> Hi,
> 
> On previous releases, and on our CentOS systems I could change password of
> user by just sudo-ing to root and typing "passwd testuser"
> 
> In current Debian release, doing that asks me to specify that user password,
> which is pointless because:
> 
> * I can access /etc/shadow anyway
> * I'm changing it because user forgot it
> 
> Is there any way to set passwd (or PAM) to not ask root for current password
> on passwd-ing non-root accounts ?
> 
> Cheers
> 
> Mariusz
> 
> --
> Mariusz Gronczewski, Administrator
> 
> Efigence S. A.
> ul. Wołoska 9a, 02-583 Warszawa
> T: [+48] 22 380 13 13
> F: [+48] 22 380 13 14
> E: mariusz.gronczewski@efigence.com
> <mailto:mariusz.gronczewski@efigence.com>

[toc] | [prev] | [next] | [standalone]

#201124

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

On 11/10/18 00:17, Mariusz Gronczewski wrote:
> On previous releases, and on our CentOS systems I could change
> password of user by just sudo-ing to root and typing "passwd
> testuser"
> 
> In current Debian release, doing that asks me to specify that user
> password, which is pointless because:

Are you sure it is asking for the "user's" password and not just your
own to authorize sudo?

Cheers
A.
-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCW74dlgAKCRCoFmvLt+/i
+0YyAQDAQvA7dhrekcfjQzQs+n3z3E/RHWwhOm7yTMMkkN/UkAEAthjNaIk+678P
+VL/o+2gDcqV+FgBIqU0YdtzDydu5xQ=
=wblw
-----END PGP SIGNATURE-----

[toc] | [prev] | [next] | [standalone]

#201137

Mariusz Gronczewski wrote on 10/10/18 8:17 AM:
> Hi,
> 
> On previous releases, and on our CentOS systems I could change password of user by just sudo-ing to root and typing "passwd testuser"
> 
> In current Debian release, doing that asks me to specify that user password, which is pointless because:
> 
> * I can access /etc/shadow anyway
> * I'm changing it because user forgot it
> 
> Is there any way to set passwd (or PAM) to not ask root for current password on passwd-ing non-root accounts ?
> 
> Cheers
> 
> Mariusz
> 
> --
> Mariusz Gronczewski, Administrator
> 
> Efigence S. A.
> ul. Wołoska 9a, 02-583 Warszawa
> T: [+48] 22 380 13 13
> F: [+48] 22 380 13 14
> E: mariusz.gronczewski@efigence.com <mailto:mariusz.gronczewski@efigence.com>
> 

When I enter  sudo passwd testuser
I get a prompt   Enter new UNIX password:

Perhaps your sudoers file is not set up correctly?

I have mine:

		(myid)     ALL = NOPASSWD: ALL

Good Luck!
Dennis

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web