Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

When I issue a command to change my password like this:

sudo passwd huahsin

The system prompt me:

Current Kerberos password:

I don't know what I have done to the system configuration, how could I eliminate this Kerberos thing when I change my password?

share|improve this question
    
What's the output of this command show for passwd: grep passwd /etc/nsswitch.conf. I think you've changed your NS resolver setup. –  slm Feb 20 at 2:38
    
it shows compat lsass. What does this means? –  huahsin68 Feb 20 at 2:40
    
That means it will use an Active Directory server to authenticate. What did you do to this system? I think it makes use of a LikeWise product. –  slm Feb 20 at 2:44
    
Lsass appears to be a LikeWise module: blog.technotesdesk.com/… –  slm Feb 20 at 2:47
    
Yes, I did install likewise thing in my system, should I uninstall it? Can I just disable it? –  huahsin68 Feb 20 at 2:50

1 Answer 1

up vote 1 down vote accepted

This issue seems likely to be a problem with the installation of a Active Directory (AD) integration product for authentication called LikeWise. This product is no longer available, to my knowledge.

You can read more about it her in this articled titled: How to join Linux server into Active Directory on SBS 2008 network. It's also listed here in the Wikipedia page on products that support SMB as well as here on the Active Directory Wikipedia page.

Here are two methods for identifying this product's been setup.

1. Lsass error messages

20111006152006:ERROR:Lsass Error [ERROR_BAD_NET_NAME] Network name not found.. Failure to lookup a domain name ending in “.local” may be the result of configuring the local system’s hostname resolution (or equivalent) to use Multi-cast DN

2. Modified nsswitch.conf

And these modifications to your /etc/nsswitch.conf file.

passwd: compat winbind lsass
group: compat winbind lsass
shadow: compat

Working around?

You should be able to safely leave it installed and change your Name Service Switch configuration file (nsswitch.conf) so that it uses just your local files for authentication.

passwd: files
group:  files
shadow: files

I also dug up this Launchpad bug that covers uninstalling LikeWise-open. There are some things that it doesn't do to revert your system when you uninstall it. They're covered in this bug along with how to manually undo the install.

share|improve this answer
    
Am I require to restart any service? –  huahsin68 Feb 20 at 3:08
    
@huahsin68 - No the changes should be instant. Did it not work? –  slm Feb 20 at 3:12
    
Nope, the Kerbeors thing still persist. Any other solution? –  huahsin68 Feb 20 at 3:19
    
@huahsin68 - see the launchpad thread I linked to. Also you need to do more then just passwd changes to nsswitch.conf. –  slm Feb 20 at 3:20
1  
@slm As I read on the link you gave, I am require to leave the domain from LikeWise. And I did try it, now the kerberos thing has gone. Great help! –  huahsin68 Feb 20 at 5:38

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.