Samba PDC password sync

[Joe Tseng]

Last night when I reread the smb.conf man page there were two small passages
of interest:

Update encrypted:
"In order for this parameter to work correctly the encrypt passwords
parameter must be set to no when this parameter is set to yes."

Encrypt passwords:
"...Windows NT 4.0 SP3 and above and also Windows 98 will by default expect
encrypted passwords unless a registry entry is changed."

- What is that registry entry?
- Should disabling the use of encrypted passwords be done?  Is it
discouraged?
- Password sync worked when I used Webmin with Samba 2.0.x.  How come that
doesn't work with 2.2.x?


----- Original Message -----
From: "Simo Sorce" <idra at samba.org>
To: "NITIN PANDE" <npande at bajajauto.co.in>
Cc: "Joe Tseng" <joe_tseng at hotmail.com>; <samba-ntdom at lists.samba.org>
Sent: Friday, October 05, 2001 2:51 AM
Subject: Re: Samba PDC password sync


> It is not possible to sync changes made from windows unless you use plain
text
> passwords, which is impossible in a domain environment.
> This is not a problem of samba, this happen becuse encrypted password are
sent
> from windows and stored as is and does not any function that can convert
the
> windows encrypted passwords into unix crypt or md5 compatible ones.
>
> > Last I had checked, there was no automatic way to transfer passwords.
You have
> > to run that mkpasswd (not exact name!) script.  If you want to keep
updating the
> > /etc/passwd file you could write a small script that each time a user
password
> > is changed, it will run that mkpasswd script thingy.  HTH,
> >
> > > Has anyone been able to make their Samba PDC work so that changes to
> > > /etc/passwd would be made automatically to smbpasswd and vice versa?
If so,
> > > what are the magic config lines in smb.conf to make this happen?  I
have
> > > been trying to do this so passwords can be changed either from the
*nix
> > > shell or from W2k.