Event ID 12293 — Windows to UNIX Password Synchronization Service -- Run-time Issues

  • Article

Applies To: Windows Server 2008 R2

Windows to UNIX Password Synchronization Service -- Run-time Issues indicates the functionality of Windows to UNIX password synchronization operations.

When Password Synchronization is configured for Windows-to-UNIX synchronization, and a password is changed on a Windows-based computer running Password Synchronization, the Password Synchronization service determines whether the user's password is to be synchronized on UNIX computers. When the Password Synchronization service is operating normally, it encrypts the password and sends it to the Password Synchronization daemon on each computer with which the Windows-based computer is configured to be synchronized. The daemon then decrypts the password and changes the password on the UNIX host.

Event Details

Product: Windows Identity Management for UNIX
ID: 12293
Source: Microsoft-Windows-IDMU-PSync
Version: 6.0
Symbolic Name: MSG_ERROR_UPDATE_PASSWORD_FILE
Message: Error updating password. Could not update password for user. %ruser = %1 %rhost = %2 %rVerify that the user exists and the user account is not disabled, expired, or locked.

Resolve

Correct UNIX side passwd/shadow file error

An error occurred while attempting to update the password. Password Synchronization cannot update the password for user username. This error typically originates in the UNIX environment when the daemon is unable to update the passwd/shadow file with the new password.

Verify that the user account exists in both the Windows and UNIX environments, and that the account is not disabled, expired, or locked. Additionally, refer to the syslog file on the UNIX-based host computer from which the password change was attempted for the exact point of failure. The syslog file should describe the exact nature of the failure in the log filed by the single sign-on daemon (SSOD). 

One or more of the following failures could be the root cause:

  • Password Synchronization was unable to locate the passwd/shadow file.
  • The passwd/shadow file is incorrectly configured or has been corrupted.
  • Password Synchronization was unable to read or modify the passwd/shadow file.

A UNIX system administrator can help you correct these problems on UNIX-based host computers.

Verify

Retry Windows to UNIX password synchronization for failed user password changes to verify that it is operational. Password Synchronization is fully operational when the password synchronization succeeds, and operating under warning conditions if password synchronization fails for some passwords but succeeds for others.

If password synchronization succeeds for some passwords but fails for others, the Windows to UNIX Password Synchronization Service is likely fully operational, but there might be account- or computer-specific configuration problems preventing password changes from being synchronized on UNIX-based hosts.

Windows to UNIX Password Synchronization Service -- Run-time Issues

Identity Management for UNIX