Changing login shell (user in LDAP)

When I try 'passwd -e' (to change my login shell), I get 'Permission denied'.

I have write access to the loginShell attribute (can change it with ldapmodify) but I can't tell/learn my/the users to learn LDIF and ldapmodify... !

Part of my pam.conf:

otherpassword requiredpam_dhkeys.so.1 debug

otherpassword requisitepam_authtok_get.so.1 debug

otherpassword requisitepam_authtok_check.so.1 server_policy debug

otherpassword requiredpam_authtok_store.so.1 server_policy debug

With this I can change password, and the Password Policy rules are obeyed.

Also, neither of 'passwd -[fgl]' works... Same problem:

-- s n i p --

<a href="mailto:root&#64;etedstst" target="_blank">root@etedstst</a># passwd -l qturfre

passwd: Sorry, wrong passwd

Permission denied

-- s n i p --

Resetting the password with ldapmodif works fine. I'll get asked for a new password at login.

[1212 byte] By [FransUrbo] at [2007-11-25 22:41:51]