I am getting some weird errors coming back from the Linux bi-directional
driver. The issue is coming from the command
/usr/local/nxdrv/bin/nxpwdpa. However, I am only getting an error, no
detail from the script. Its pretty basic, it just tries to set password
and issues a generic error on a non zero return.

Is there anyway to an error code listing back for this command?

PS# If you try the password again, it will usually work. Its not policy
as this command runs as root and will bypass policy.

Trace output:

2014-12-01 09:55:47 [31934@1077021616]: (trace)
SubscriptionShim.execute() returned:
2014-12-01 09:55:47 [31934@1077021616]: (trace) <nds dtdversion="1.1"
ndsversion="8.6">
2014-12-01 09:55:47 [31934@1077021616]: (trace) <source>
2014-12-01 09:55:47 [31934@1077021616]: (trace) <product
version="4.0.2" build="20120417_1509" />
2014-12-01 09:55:47 [31934@1077021616]: (trace) <contact />
2014-12-01 09:55:47 [31934@1077021616]: (trace) </source>
2014-12-01 09:55:47 [31934@1077021616]: (trace) <output>
2014-12-01 09:55:47 [31934@1077021616]: (trace) <status
event-id="pwd-subscribe" level="error">modify-password was unable set
local password for USERIDHERE</status>
2014-12-01 09:55:47 [31934@1077021616]: (trace) </output>
2014-12-01 09:55:47 [31934@1077021616]: (trace) </nds>

Password script snippet (modify-user.sh):

# call the native set password utility, but do not log the actual
command
$SETPASSWORD -f "$loginName" $MAP <<DO_NOT_EDIT
$password
DO_NOT_EDIT

# check the return code
RC=$?
if [ "$RC" -eq 0 ]
then
LOGGER -p $CMDOKPRIO "$loginName's password has been reset:RC=$RC:"
STATUS_SUCCESS
else
LOGGER -p $CMDFAILPRIO "Failed to reset password for
$loginName:RC=$RC:"
STATUS_ERROR "modify-password was unable set local password for
$loginName"
fi

setpassword command:

#SETPASSWORD is inherited from globals.sh

SETPASSWORD=${INSTALL_PATH}bin/nxpwdpa; export SETPASSWORD


--
stuartbyrnes
------------------------------------------------------------------------
stuartbyrnes's Profile: https://forums.netiq.com/member.php?userid=1312
View this thread: https://forums.netiq.com/showthread.php?t=52369