<div dir="ltr"><div dir="ltr"><div>Hi James, </div><div> </div><div>I get this error "Wrong username or password."</div><div><div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><pre style="color:rgb(46,52,54);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px">-- </pre><div style="color:rgb(46,52,54);font-size:14.6667px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;width:71ch">Ibiam Chihurumnaya </div><div style="color:rgb(46,52,54);font-size:14.6667px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;width:71ch"><a href="mailto:ibiamchihurumnaya@gmail.com" style="color:rgb(42,118,198)" target="_blank">ibiamchihurumnaya@gmail.com</a></div><div style="color:rgb(46,52,54);font-size:14.6667px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;width:71ch"> </div></div></div></div></div></div> </div></div></div> <div class="gmail_quote"><div dir="ltr">On Thu, Sep 27, 2018 at 6:39 AM James Cameron <<a href="mailto:quozl@laptop.org">quozl@laptop.org</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Bernie, can I change the RootDN password? Ibiam, what does <a href="http://ldap.sugarlabs.org" rel="noreferrer" target="_blank">ldap.sugarlabs.org</a> show you when you try to change your password? -- Ibiam sent me his password, and it didn't work for me; sunjammer:~# ldappasswd -H ldap://<a href="http://127.0.0.1" rel="noreferrer" target="_blank">127.0.0.1</a> -x -D "uid=ibiamchihurumnaya,ou=People,dc=sugarlabs,dc=org" -W -A -S Old password: Re-enter old password: New password: Re-enter new password: Enter LDAP Password: ldap_bind: Invalid credentials (49) 49!sunjammer:~# On <a href="https://ldap.sugarlabs.org/passwd" rel="noreferrer" target="_blank">https://ldap.sugarlabs.org/passwd</a> the response was "Wrong username or password.", which means @ldap_bind failed twice. On Wed, Sep 26, 2018 at 11:32:53AM +1000, James Cameron wrote: > Ibiam and I talked about this problem after the meeting today. > > Our plan is for Ibiam to send me the password using GnuPG, and I'll > try ldappasswd after su. > > Logs from sunjammer from this event; > <a href="http://dev.laptop.org/~quozl/z/1g4wNM.txt" rel="noreferrer" target="_blank">http://dev.laptop.org/~quozl/z/1g4wNM.txt</a> > > On Tue, Sep 25, 2018 at 02:44:26PM +0100, Chihurumnaya Ibiam wrote: > > James no error from "ssh -v", it only shows connection was established > > and a warning that my password is expired and i should change it but > > typing my password only throws an incorrect password error. > > > > -- > > > > Ibiam Chihurumnaya > > [1]<a href="mailto:ibiamchihurumnaya@gmail.com" target="_blank">ibiamchihurumnaya@gmail.com</a> > > > > On Tue, Sep 25, 2018 at 11:04 AM James Cameron <[2]<a href="mailto:quozl@laptop.org" target="_blank">quozl@laptop.org</a>> wrote: > > > > Changing my password using [3]<a href="http://ldap.sugarlabs.org" rel="noreferrer" target="_blank">ldap.sugarlabs.org</a> failed with; "Can't > > modify LDAP information." > > > > Changing my password using ldappasswd from sunjammer shell prompt > > seemed to work; > > > > quozl@sunjammer:~$ ldappasswd -H ldap://[4]127.0.0.1 -x -D "uid=quozl,ou= > > People,dc=sugarlabs,dc=org" -W -A -S > > Old password: <oldpassword> > > Re-enter old password: <oldpassword> > > New password: <newpassword> > > Re-enter new password: <newpassword> > > Enter LDAP Password: <oldpassword> > > quozl@sunjammer:~$ > > > > However shadowLastChange for me hasn't moved, so I'm not sure if it > > really worked. Password authentication isn't enabled for SSH anyway. > > > > Checking Ibiam's entry using ldapsearch; > > > > $ ldapsearch -x -LLL uid=ibiamchihurumnaya > > dn: uid=ibiamchihurumnaya,ou=People,dc=sugarlabs,dc=org > > uid: ibiamchihurumnaya > > cn: Chihurumnaya Ibiam > > sn: Ibiam > > objectClass: person > > objectClass: organizationalPerson > > objectClass: inetOrgPerson > > objectClass: posixAccount > > objectClass: top > > objectClass: shadowAccount > > shadowMax: 365 > > shadowWarning: 14 > > uidNumber: 837 > > gidNumber: 837 > > homeDirectory: /home/ibiamchihurumnaya > > gecos: Chihurumnaya Ibiam > > displayName: Chihurumnaya Ibiam > > givenName: Chihurumnaya > > loginShell: /bin/bash > > mail: [5]<a href="mailto:ibiamchihurumnaya@gmail.com" target="_blank">ibiamchihurumnaya@gmail.com</a> > > shadowLastChange: 17407 (29th August 2017) > > > > Current date is beyond shadowLastChange plus shadowMax plus > > shadowWarning, so the account is probably inactive and disabled. > > > > Ibiam, is there some indication you have received to confirm that, > > e.g. an "ssh -v" error? > > > > I've tried changing Ibiam's password as root, but it prompts me for > > Ibiam's old password, which I don't know. > > > > sunjammer:~# ldappasswd -H ldap://[6]127.0.0.1 -x -D "uid= > > ibiamchihurumnaya,ou=People,dc=sugarlabs,dc=org" -W -A -S > > Old password: > > > > I've found a procedure for changing the RootDN password for OpenLDAP, > > but if I did that I'd need a secure way to communicate it to other > > system administrators. It also looks hacky and prone to error, so I'm > > not sure the procedure is correct. > > > > [7]<a href="https://www.digitalocean.com/community/tutorials/" rel="noreferrer" target="_blank">https://www.digitalocean.com/community/tutorials/</a> > > how-to-change-account-passwords-on-an-openldap-server > > > > On Fri, Sep 21, 2018 at 02:35:07PM +0100, Chihurumnaya Ibiam wrote: > > > Hi all, > > > > > > I recently complained about my sunjammer account as I haven't been able > > to > > > login because my password is expired and using [1][8]<a href="http://ldap.sugarlabs.org" rel="noreferrer" target="_blank">ldap.sugarlabs.org</a> I > > couldn't > > > reset my password, and I've not been able to send emails from my @[2] > > > [9]<a href="http://sugarlabs.org" rel="noreferrer" target="_blank">sugarlabs.org</a> address and my emails to the lists I'm subscribed to at > > [3] > > > [10]<a href="http://lists.sugarlabs.org" rel="noreferrer" target="_blank">lists.sugarlabs.org</a> gets bounced. > > > > > > Bernie asked for my gpg key and I gave it to him and I haven't had a > > reply > > > since then, I've attached my gpg key here too. Thanks. > > > > > > -- > > > > > > Ibiam Chihurumnaya > > > [4][11]<a href="mailto:ibiamchihurumnaya@gmail.com" target="_blank">ibiamchihurumnaya@gmail.com</a> > > > > > > References: > > > > > > [1] [12]<a href="http://ldap.sugarlabs.org/" rel="noreferrer" target="_blank">http://ldap.sugarlabs.org/</a> > > > [2] [13]<a href="http://sugarlabs.org/" rel="noreferrer" target="_blank">http://sugarlabs.org/</a> > > > [3] [14]<a href="http://lists.sugarlabs.org/" rel="noreferrer" target="_blank">http://lists.sugarlabs.org/</a> > > > [4] mailto:[15]<a href="mailto:ibiamchihurumnaya@gmail.com" target="_blank">ibiamchihurumnaya@gmail.com</a> > > > > > -----BEGIN PGP PUBLIC KEY BLOCK----- > > > > > > mQENBFuSob0BCADJhL3D92fOo3dzZVL9ehjRTqkKjCsq5HF7h27tQ9TPZ0SKoNlA > > > B5arj7Fpf5rWpXfCqvnqcddEtxyJgDNVw0mkqkrE8b5GEEVibAKE3P9JrdMIsXP+ > > > v0VcmAKmfAKl1azXEw4vTpMCc/wTpYyw5CtNRxXY9oPUnU8M+MpgjyJlDD35PRqM > > > w/K4P5/VRKAy0NVBvVq9JW3B5+Qb32cWvXBvMYKquAdFAfWfSqtXm2xzpSgWtxDa > > > 2E8EkNCH4b2ldHs0AQmFxxhIVw+/JOxv5rgmHgbMu4gT0gwirohSeoT4bGYJS0Xd > > > Z5esS2ziXVS+3exgZUXnfag6jSf9gv7qk3QvABEBAAG0MEliaWFtIENoaWh1cnVt > > > bmF5YSA8aWJpYW1jaGlodXJ1bW5heWFAZ21haWwuY29tPokBVAQTAQgAPhYhBD/x > > > zRDG2poX3z2LMD9hLWt6sZnJBQJbkqG9AhsDBQkDwmcABQsJCAcCBhUKCQgLAgQW > > > AgMBAh4BAheAAAoJED9hLWt6sZnJEI4H/iZX0QRyCE/FSK453dkEh6a9ZFp/f6YS > > > iQkvXRzRg+zN7GUZ96GihPCxAhQTcowpV1+ggEn2Th+ciQmYuuZkt5aObnFmnwRU > > > Nzz3W9REYyz/1CNFbqeDBTXuD+yXYx0M3QDkwdjvir5Yf7CfbOVGQL7/v7DjlgVP > > > MPLqtOqJGHvsW3sMC+i9SAhhk0Rx9ZqCOJceQzy7hvZcBL7V28oIBcmsyayW5A5D > > > KfeUqS4CIdiHg5J2YjCqywoxGFvvRu4QXdvd1OyUcjz7Y+a3HpQwbm6tGlDWNk4q > > > wJ4Iat0UEZRRSkEJZC9aNUGruEysLrBZMx047oWRJZP54m/8ZtJhkyK5AQ0EW5Kh > > > vQEIAM1Q43bDn6BzUqolL3JB4EmSbdx/7vwz5HVTJOeiKOQJZhDl1xY8FLIKJKF+ > > > rO0DMluV0ebJCJ3zT/ls96mkImlP9TwLpREJoawfKgIPeZxMYkzxZ/609bxUGXRn > > > V38AxqccJqErqkyRhisiXxZx/9xeG8ID2F9S5bzhsb7iMTto94sJh/Gva//3qs6o > > > 34VNYWf/aHlIR5cutgMBorEW9OCZdLSVy6GZeeNRx5PmVkxjrEYCgvqZZO5XpzOX > > > 4qY5ZKSAIKvZKXpL0wVeFdg4L+HgyKyMbcyDqBSbQBbqolFphNHmBTsbDQHBdq5+ > > > Df8Y8ziEdt5ztUmxcDxYFjhfoFEAEQEAAYkBPAQYAQgAJhYhBD/xzRDG2poX3z2L > > > MD9hLWt6sZnJBQJbkqG9AhsMBQkDwmcAAAoJED9hLWt6sZnJXtQIALA1jSIFDJP5 > > > 2eEv3LNMhXfT5DCTUbkYE/qFk+zQD3ZVF+uJWTRZDabYiMLRXwX9TFNVm4XWcqRB > > > 71n5Sgsi2Osa10bCrEHYtdOW1rwBKVJtaxsGigDF/rIvah5N01h1/rfsg7eI+z6o > > > pjD9mcMlDyonL7h+tYvUcr8ACxa0uzZZi3TaE1D/nuJ/XIJQFGX1bpoWYqp/41HX > > > itHOirq9ZRLRpqRVeM13Pa3N7S9KQQr2K6XhLsfMSJXdO/QvLMQgqtSlqxnQ5k3k > > > StUUjXVuF5EtZe+MSIrqAJRSgVeok6M8HdHkwDSGocTfR6VumJI+ys6dPREhQGiP > > > JSeiVJ+oqNs= > > > =lcIl > > > -----END PGP PUBLIC KEY BLOCK----- > > > > -- > > James Cameron > > [16]<a href="http://quozl.netrek.org/" rel="noreferrer" target="_blank">http://quozl.netrek.org/</a> > > > > References: > > > > [1] mailto:<a href="mailto:ibiamchihurumnaya@gmail.com" target="_blank">ibiamchihurumnaya@gmail.com</a> > > [2] mailto:<a href="mailto:quozl@laptop.org" target="_blank">quozl@laptop.org</a> > > [3] <a href="http://ldap.sugarlabs.org/" rel="noreferrer" target="_blank">http://ldap.sugarlabs.org/</a> > > [4] <a href="http://127.0.0.1/" rel="noreferrer" target="_blank">http://127.0.0.1/</a> > > [5] mailto:<a href="mailto:ibiamchihurumnaya@gmail.com" target="_blank">ibiamchihurumnaya@gmail.com</a> > > [6] <a href="http://127.0.0.1/" rel="noreferrer" target="_blank">http://127.0.0.1/</a> > > [7] <a href="https://www.digitalocean.com/community/tutorials/how-to-change-account-passwords-on-an-openldap-server" rel="noreferrer" target="_blank">https://www.digitalocean.com/community/tutorials/how-to-change-account-passwords-on-an-openldap-server</a> > > [8] <a href="http://ldap.sugarlabs.org/" rel="noreferrer" target="_blank">http://ldap.sugarlabs.org/</a> > > [9] <a href="http://sugarlabs.org/" rel="noreferrer" target="_blank">http://sugarlabs.org/</a> > > [10] <a href="http://lists.sugarlabs.org/" rel="noreferrer" target="_blank">http://lists.sugarlabs.org/</a> > > [11] mailto:<a href="mailto:ibiamchihurumnaya@gmail.com" target="_blank">ibiamchihurumnaya@gmail.com</a> > > [12] <a href="http://ldap.sugarlabs.org/" rel="noreferrer" target="_blank">http://ldap.sugarlabs.org/</a> > > [13] <a href="http://sugarlabs.org/" rel="noreferrer" target="_blank">http://sugarlabs.org/</a> > > [14] <a href="http://lists.sugarlabs.org/" rel="noreferrer" target="_blank">http://lists.sugarlabs.org/</a> > > [15] mailto:<a href="mailto:ibiamchihurumnaya@gmail.com" target="_blank">ibiamchihurumnaya@gmail.com</a> > > [16] <a href="http://quozl.netrek.org/" rel="noreferrer" target="_blank">http://quozl.netrek.org/</a> > > > _______________________________________________ > > Systems mailing list > > <a href="mailto:Systems@lists.sugarlabs.org" target="_blank">Systems@lists.sugarlabs.org</a> > > <a href="http://lists.sugarlabs.org/listinfo/systems" rel="noreferrer" target="_blank">http://lists.sugarlabs.org/listinfo/systems</a> > > > -- > James Cameron > <a href="http://quozl.netrek.org/" rel="noreferrer" target="_blank">http://quozl.netrek.org/</a> -- James Cameron <a href="http://quozl.netrek.org/" rel="noreferrer" target="_blank">http://quozl.netrek.org/</a> </blockquote></div>