/usr/lib/chkpwd/tcb_chkpwd from pam_tcb has insufficient permissions to work in NIS environment; the proper solution would be switching it to \"control\" framework. See also #709. --- ---
Fixed in pam_tcb-0.9.8.3-alt1: - Added control support for tcb_chkpwd, with three alternatives: \"tcb\" (default), \"traditional\" (for shadow/nis) and \"restricted\" (root only).