CentOS 6.7 password issue

[TrevorH]

for p in $(rpm -qa); do rpm --setperms $p; rpm --setugids $p; done

[cbraidwood]

Great, thanks!

Went through that, reset all the perms, "rpm -Va" now only returns 66 rows, I think I'm good there.

I created a new ID with useradd, get the id a password with passwd (both run as root) then then logged in as that user and tried to change the password. I still got the "passwd: Authentication token manipulation error" error.

The entries in /var/log/sercure are:

Jan 7 09:33:53 informix useradd[25216]: add 'chucktest' to shadow group 'atwprod'
Jan 7 09:34:07 informix passwd: pam_unix(passwd:chauthtok): password changed for chucktest
Jan 7 09:34:09 informix sshd[25239]: Connection closed by 10.30.9.183
Jan 7 09:34:10 informix sshd[25241]: Connection closed by 10.30.9.140
Jan 7 09:34:23 informix sshd[25242]: Accepted keyboard-interactive/pam for chucktest from 70.34.165.129 port 37369 ssh2
Jan 7 09:34:23 informix sshd[25242]: pam_unix(sshd:session): session opened for user chucktest by (uid=0)
Jan 7 09:34:26 informix unix_chkpwd[25272]: check pass; user unknown
Jan 7 09:34:31 informix unix_chkpwd[25273]: check pass; user unknown
Jan 7 09:34:31 informix unix_chkpwd[25273]: password check failed for user (chucktest)
Jan 7 09:34:31 informix passwd: pam_unix(passwd:chauthtok): authentication failure; logname=chucktest uid=567 euid=567 tty=pts/1 ruser= rhost= user=chucktest

It looks to me that PAM doesn't recognize the user... My choices seem to be disable PAM (if that's even possible, or advisable..) or learn how to configure PAM....

[Whoever]

What is in /etc/nsswitch.conf? Has this file changed from the default?

[cbraidwood]

Here are the contents of the /etc/nsswitch.conf. I stripped out the comments to save space. The ownership and permissions look fine to me, root:root and only writable by root.....

passwd: files
shadow: files
group: files

hosts: files dns

bootparams: nisplus [NOTFOUND=return] files

ethers: files
netmasks: files
networks: files
protocols: files
rpc: files
services: files

netgroup: nisplus

publickey: nisplus

automount: files nisplus
aliases: files nisplus

[cbraidwood]

This issue has been resolved. It turns out there where multiple permissions issues going on, and when they were finally all tracked down and corrected it works fine. Thanks to all for your help.