CTRL-ALT-DEL Password Change Problem

[Andrew Perrin - Demography]

One option is to put in place some sort of hack to sync the passwords --
the one I wrote is at http://demog.berkeley.edu/~aperrin/tips/mchp.html .

Good luck-
Andy

---------------------------------------------------------------------
Andrew J. Perrin - aperrin at demog.berkeley.edu - NT/Unix Admin/Support
Department of Demography    -    University of California at Berkeley
2232 Piedmont Avenue #2120  -    Berkeley, California, 94720-2120 USA
http://demog.berkeley.edu/~aperrin --------------------------SEIU1199

On Sun, 17 Jan 1999, Beej wrote:

> I'm working in an academic environment, and we have students working on
> Solaris 2.6 and NT 4 (not up to SP4 yet), and I'll be moving our 
> NT clients onto a dedicated Samba-based PDC running on an Ultra1 SPARC.
> 
> One of the main goals here will be to sync the passwords so students
> need only be concerned about the one (apparent) account.
> 
> My problem is that I cannot change my NT password while served off
> samba using the CTRL-ALT-DEL method. It insists that I got my old
> password wrong, and so will not change (but it lets me log into the
> workstation to start with).
> 
> The log message says:
> [1999/01/17 00:59:45, 0] smbd/chgpasswd.c:check_oem_password(741)
>   check_oem_password: old lm password doesn't match.
> 
> Hacking the code shows that the old nt password doesn't match either.
> 
> I've been having this problem with samba releases 2beta4-5 and
> the big one, samba-2.0.0. Even have the same problem with grabbing
> the archive off cvs. Tis most frustrating.
> 
> I've successfully changed passwords using smbpasswd and ntpass in
> rpcclient (btw, is there a man page out for rpcclient?).
> 
> Is this a problem that will magically disappear if I upgrade the NT
> workstations to SP4 ?
> 
> I've read alot of messages in the samba-ntdom archive, and it seems
> that many people have managed to get this working, and I'm fascinated
> how they've done it. Suggestions please.
> 
> I've had no problem with adding and using new users, netlogon shares
> with policies, and roaming profiles ; They are working fine without
> too much fuss.
> 
> Included is the smb.conf for your inspection.
> 
> Something else I've noticed. I downloaded a ssh program that runs on
> NT boxes (ftp://ftp.netsoc.ucd.ie/pub/computing/ssh) that I've used
> before.
> 
> I've tried running the program off a samba share, and through the
> program's execution, I get this NT dialogue box popping up, saying
> something like "snmp.exe: The network name has been deleted". This
> message then keeps cropping up with any attempt to access files
> from the samba share, until logout.
> 
> I've only had this error come up from this ssh binary, and off a
> samba share (moved it to c:\temp and it worked fine).
> 
> This is not a ntdomain problem, but I thought I'd share this bit of
> weirdness with the rest of you. =)
> 
> Bj
> 
> Included smb.conf
> 
> # Global parameters
> 	; Samba Test Domain
> 	workgroup = BJLAB
> 	...
> 	encrypt passwords = Yes
> 	log file = /local/samba2/var/log.%m
> 	max log size = 5000
> 	lock dir = /tmp/sambalocks
> 	browseable = no
> 	create mask = 0600
> 	directory mask = 0700
> 	domain logons = yes
> 	domain master = yes
> 	preferred master = yes
> 
> 	; Watch those roaming profile connections disappear ASAP
> 	deadtime = 1
> 
> 	logon drive = X:
> 	logon home = \\%N\%U
> 	logon script = scripts\%U.cmd
> 	logon path = \\%N\Profiles\%U
> 
> [homes]
> 	comment = Home Directories
> 	writeable = yes
> 	browseable = yes
> 	guest ok = no
> 
> 	...
> 
> [NETLOGON]
> 	path = /local/samba2/netlogon
> 	writeable = no
> 	locking = no
> 
> [Profiles]
> 	path = /local/samba2/profiles
> 	writeable = yes
> 
> +-------------------------------+--------------------------------------+
> |      Benjamin (Bj) Kuit       |  School of Computing Sciences        |
> |      Systems Programmer       |  University of Technology, Sydney    |
> |      Phone: 9514 1841         |  Email: bj at mcs.uts.edu.au            |
> |      Mobile: 0412 182 972     |                                      |
> +-------------------------------+--------------------------------------+
>