Zentyal Forum, Linux Small Business Server

Zentyal Server => Installation and Upgrades => Topic started by: rahulbaba on February 14, 2012, 01:28:51 pm

Title: passwd: Authentication token manipulation error
Post by: rahulbaba on February 14, 2012, 01:28:51 pm
Whenever I am trying to assign the password to user, I am getting this -

Code: [Select]
serveradmin@openserver:~/LAMP$ sudo passwd salaryuser
passwd: Authentication token manipulation error
passwd: password unchanged

I also tried with this, but no luck

Code: [Select]
serveradmin@openserver:~/LAMP$ sudo mount -n -o remount,rw /
serveradmin@openserver:~/LAMP$ su root
Password:
root@openserver:/home/serveradmin/LAMP# passwd salaryuser
passwd: Authentication token manipulation error
passwd: password unchanged

Any help would be appreciated?
Title: Re: passwd: Authentication token manipulation error
Post by: christian on February 14, 2012, 01:57:21 pm
Is this account an ldap account?
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 14, 2012, 01:59:30 pm
Thanks for your reply.
This is not an ldap account. I just added that user via "useradd" command.
Title: Re: passwd: Authentication token manipulation error
Post by: robb on February 14, 2012, 03:26:50 pm
Have a look HERE (http://www.linuxquestions.org/questions/linux-security-4/authentication-token-manipulation-error-2813/). It might explain your problem.
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 15, 2012, 03:09:01 pm
Have a look HERE (http://www.linuxquestions.org/questions/linux-security-4/authentication-token-manipulation-error-2813/). It might explain your problem.

Didn't work. Moreover, After doing that I was not able to login to my root and admin account. It was not accepting password. Now, I am not able to login in my Zentyal GUI interface (https://localhost/) - shows invalid password. I have already restored my previous shadow file, it is still not working. Now I cannot login to zentyal interface.

However, I am able to login in server using ssh access.

Title: Re: passwd: Authentication token manipulation error
Post by: locoabreu on February 16, 2012, 09:59:19 am
look here http://www.ideaexcursion.com/2009/09/11/fixing-authentication-token-manipulation-error-when-changing-passwords-with-passwd/ (http://www.ideaexcursion.com/2009/09/11/fixing-authentication-token-manipulation-error-when-changing-passwords-with-passwd/)
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 16, 2012, 12:40:30 pm
look here http://www.ideaexcursion.com/2009/09/11/fixing-authentication-token-manipulation-error-when-changing-passwords-with-passwd/ (http://www.ideaexcursion.com/2009/09/11/fixing-authentication-token-manipulation-error-when-changing-passwords-with-passwd/)
Likewise open was not installed on the system, so that didn't work. Now, I am not only having that authentication token manipulation error. I am also not able to login to Zentyal web interface using my admin account, it shows invalid password.
Title: Re: passwd: Authentication token manipulation error
Post by: robb on February 16, 2012, 12:44:30 pm
If you have physical access to the system, you can reset root password: http://www.psychocats.net/ubuntu/resetpassword
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 16, 2012, 01:26:29 pm
If you have physical access to the system, you can reset root password: http://www.psychocats.net/ubuntu/resetpassword

I am little confused about that solution. Is this a solution for - "I am also not able to login to Zentyal web interface using my admin account, it shows invalid password." error OR this is a solution for "passwd: Authentication token manipulation error
passwd: password unchanged"  error.
Title: Re: passwd: Authentication token manipulation error
Post by: robb on February 16, 2012, 03:23:44 pm
The last post is if you have no root access anymore (or forgot you root password) It has nothing to do with access to Zentyal webinterface.

Just to remind you: Zentyal webinterface access is for any account that is member of the 'admin' group. So if you manage to add an account to that group, you can login to the webinterface.
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 17, 2012, 05:45:20 am
The last post is if you have no root access anymore (or forgot you root password) It has nothing to do with access to Zentyal webinterface.

Just to remind you: Zentyal webinterface access is for any account that is member of the 'admin' group. So if you manage to add an account to that group, you can login to the webinterface.

NO, I haven't forgotten the root or admin password. I can login via ssh in to my server and can run sudo commands. The problem is only that I am not able to login to zentyal interface. In addition, the user which I am using for accessing the zentyal interface is in admin group.

This problem occur after doing this -
Have a look HERE (http://www.linuxquestions.org/questions/linux-security-4/authentication-token-manipulation-error-2813/). It might explain your problem.
Title: Re: passwd: Authentication token manipulation error
Post by: locoabreu on February 17, 2012, 09:15:17 am
1.Why you manually add users?This is very sticky method.

2. In modern Unix like Linux systems users under user identifier number  1000 treated like system user.You user Manny have user identifier 503?Why?
From your example :
Quote
add a user name: manny::503:503:Manny Fernandez:/home/manny:/bin/bash

My user example
Quote
myuser:x:1000:1000:myuser,,,:/home/myuser:/bin/bash


3.You must have x field
Quote
however in most modern uses this field is usually set to "x" (or some other indicator) with the actual password information being stored in a separate shadow password file
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 21, 2012, 06:23:50 am
This issue is never going to solve. :-[
Title: Re: passwd: Authentication token manipulation error
Post by: locoabreu on February 22, 2012, 11:27:38 am
This your user who has ssh login access.Check this user name in another files.

/etc/passwd
/etc/shadow
/etc/group

In group file do you have
Quote
adm:x:4:ebox,youruser
?
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 22, 2012, 11:59:11 am
Yes my user is present in those files. In /etc/group - adm:x:4:ebox,serveradmin,nexussalary
Title: Re: passwd: Authentication token manipulation error
Post by: locoabreu on February 22, 2012, 02:05:10 pm
Seems everything OK.Do you can paste into rows for this user from /etc/passwd and /etc/shadow?For compare with my user...
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 22, 2012, 03:41:09 pm
Seems everything OK.Do you can paste into rows for this user from /etc/passwd and /etc/shadow?For compare with my user...

Here is the output -

Code: [Select]
serveradmin@openserver:~$ cat /etc/shadow | grep serveradmin
serveradmin:$6$enN7XBpM$Pywjq36pESgNwToun4009DmvqsyG2YTSi/ksBhoBk27QyEmGo2d.FVkwvDr41FdV44jLv/unWtGCaEdeeBlMP1:15336:0:99999:7:::
Code: [Select]
serveradmin@openserver:~$ cat /etc/passwd | grep serveradmin
serveradmin:x:1000:1000:Application Nexus:/home/serveradmin:/bin/bash
Title: Re: passwd: Authentication token manipulation error
Post by: locoabreu on February 23, 2012, 07:45:02 am
And in passwd and shadow file all look fine.

Check in /etc/group do you have lines belllow.

Quote
lpadmin:x:114:serveradmin
sambashare:x:115:serveradmin
admin:x:116:serveradmin



Here you have maybe useful article to solve this.https://mohammednv.wordpress.com/2008/01/08/authentication-token-manipulation-error-when-changing-user-passwords-in-linux/ (https://mohammednv.wordpress.com/2008/01/08/authentication-token-manipulation-error-when-changing-user-passwords-in-linux/)
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on February 23, 2012, 08:33:31 am
Thank You very much for replying. Yes it is there in /etc/group, this is the output -

Code: [Select]
serveradmin@openserver:~$ cat /etc/group | grep serveradmin
root:x:0:serveradmin,nexussalary,library
adm:x:4:ebox,serveradmin,nexussalary
dialout:x:20:serveradmin,asterisk
cdrom:x:24:serveradmin,ebox
www-data:x:33:serveradmin
plugdev:x:46:serveradmin
serveradmin:x:1000:nexussalary,library
lpadmin:x:117:serveradmin,ebox
sambashare:x:118:serveradmin
admin:x:119:serveradmin,domainadmin
libvirtd:x:129:serveradmin

I already tried with pwconv, but that blocked the user,"serveradmin", from accessing the zentyal web interface. Now, I am no more able to login to zentyal web interface using this username.
Title: Re: passwd: Authentication token manipulation error
Post by: yadap on July 19, 2012, 08:23:12 pm
@rahulbaba.. If you are still looking for solution to your problem, here is how I solved the same problem as yours but without digging the other files like /etc/shadow or /etc/passwd etc.

in the terminal

Code: [Select]
sudo pam-auth-update --force
press enter till authentication dialog box goes away

Hope it helps.
Title: Re: passwd: Authentication token manipulation error
Post by: rahulbaba on July 23, 2012, 09:05:17 am
@rahulbaba.. If you are still looking for solution to your problem, here is how I solved the same problem as yours but without digging the other files like /etc/shadow or /etc/passwd etc.

in the terminal

Code: [Select]
sudo pam-auth-update --force
press enter till authentication dialog box goes away

Hope it helps.

Thank You for replying. I have tried almost everything, but still the problem is their. I have tried that solution, after entering the command, I got the PAM Package configuration screen(attached the screenshot) and pressed enter. After that when I tried to change the password, I am getting this now -

Code: [Select]
root@openserver:~# passwd user1
passwd: Authentication information cannot be recovered
passwd: password unchanged
Title: Re: passwd: Authentication token manipulation error
Post by: catz on June 11, 2013, 03:32:45 am
try updating the file I have the same problem and it finally worked when I updated it