PDC password changes

[Andrew Perrin - Demography]

Wow, you're asking for a lot.  See below for what we've got:

---------------------------------------------------------------------
Andrew J. Perrin - aperrin at demog.berkeley.edu - NT/Unix Admin/Support
Department of Demography    -    University of California at Berkeley
2232 Piedmont Avenue #2120  -    Berkeley, California, 94720-2120 USA
http://demog.berkeley.edu/~aperrin --------------------------SEIU1199

On Wed, 12 Aug 1998, Christian Kumpf wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> 
> Hello,
> 
> does anybody have a cvs snapshot with the following things
> working:
> 1.) domain logins
Yes, very reliably in a domain of about 20 NT machines.

> 2.) password changeable on the client side with the Ctl-Alt-Del-Dialog
Nope - I don't think this is implemented yet.

> 3.) server based profiles
Yes, reliably except that NT has an irritating habit of asking users
questions they can't possibly understand ("Your locally-stored profile is
newer than your domain profile.  Download or use local?" is a favorite).
But that's not Samba's problem.

> 4.) file and printer sharing (of course :-)
Yes.

> and optionally (minor importance)
> 5.) support for the domain user manager (it currently simply crashes)
Again, I believe this is not yet supported.

> 6.) samba/unix password synchronization
I have a hack I've developed that listens to a socket on the server then
changes the smbpasswd file; the daemon handles both passwd and smbpasswd
and the client sends it a string over the socket from other machines.
This works, but: (1) it's not exactly elegant; and (2) there are some
serious security concerns if you think your network might be sniffed.

> 7.) profile migration (i.e. the ability to move local profiles to the server)
Haven't tried it.

> 8.) support for Novells Netware Shell, actually the attempt to do
>    a domain login on a machine with the novell shell crashes the client.
Haven't tried it.

> 
> I'm currently using a cvs snapshot from Jul 22 20:03, I've tested some
> snapshots after that, but I didn't get one to work (locking + configure
> problems). I have NTDOMAIN and ALLOW_PASSWORD_CHANGE
> defined in  the makefile and tried both unix password sync=yes/no
> in the config file.
> 
> My setting is
> clients: NT 4.0 WS (german) + SP3
> server: Linux 2.0.35 (Caldera
> Openlinux Lite 1.2.010)
> 
> Thanks in advance,
> 	Christian
> - --
> Christian Kumpf           Marc Dauenhauer EDV Beratung
> System Developer          Donnersbergring 15
> Network Administrator     64295 Darmstadt
> Member of the EATCS       Tel.: -49-6151-313 939
> Smurf at Dauenhauer.DE       Fax.: -49-6151-313 971
> 
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.3i
> Charset: noconv
> Comment: See http://www.dauenhauer.de/PGP for public keys
> 
> iQCVAwUBNdBiohKRe/EEBKMBAQE+GQQAvfKhhrWG0Px+fuTej4k4k8QKzXGcL+RR
> cgaT6z5VjRrH8vhPnFpnHZRAahBce2PIRG5PN9akFwmbik4H8wpa9XvM1gHzHi3l
> mkNTss2rzFHpmdY8Vz4s57kCalz1Y6ZKOmLu3sVOQQTj/1CGEW5mjOX7Grrp7rGK
> rJwYMiaHKXY=
> =5KAo
> -----END PGP SIGNATURE-----
>