IPA client cannot change AD Trusted User password
[root@vm-idm-012 ~]# rpm -q ipa-server ipa-client sssd
ipa-server-4.5.0-10.el7.x86_64
ipa-client-4.5.0-10.el7.x86_64
sssd-1.15.2-25.el7.x86_64
Console output:
[root@vm-idm-012 ~]# su pw1144518888@pne.qe
sh-4.2$
sh-4.2$ passwd
Changing password for user pw1144518888@pne.qe.
Current Password:
Password change failed. Server message: Old password not accepted.
passwd: Authentication token manipulation error
[root@vm-idm-012 ~]# tail -5 /var/log/secure
May 10 19:19:36 localhost su: pam_unix(su:session): session opened for user
pw1144518888@pne.qe by root(uid=0)
May 10 19:19:43 localhost passwd: pam_unix(passwd:chauthtok): user
"pw1144518888@pne.qe" does not exist in /etc/passwd
May 10 19:19:55 localhost passwd: pam_sss(passwd:chauthtok): User info message:
Password change failed. Server message: Old password not accepted.
May 10 19:19:55 localhost passwd: pam_sss(passwd:chauthtok): Authentication
failed for user pw1144518888@pne.qe: 4 (System error)
May 10 19:21:07 localhost su: pam_unix(su:session): session closed for user
pw1144518888@pne.qe
How reproducible:
100%
Actual results:
password change fails
Expected results:
password change succeeds.
Additional info:
Old bug https://bugzilla.redhat.com/show_bug.cgi?id=870238 with the same issue
was verified in Rhle 6.4 and sssd-1.9.2-24.el6