password change block for 3.0.14

Fri Apr 8 02:54:37 GMT 2005

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've hit a stumbling block for 3.0.14 (fixes for Win2003 sp1).
A user logged onto a Win2k sp1 client cannot change her password
on a Samba DC.

The client uses an older RPC against a Samba PDC (samr 0x26 -
ChangePasswordUser() ).  Where as as when joined to an NT 4 Domain,
the client uses a different call ( samr 0x37 - SamrUnicodeChangePWUser2() ).

My best guess is that the change is caused by the NTLMSSP auth
negotiate tagged onto the RPC bind ACK from the Samba box.

Anyone got any suggestions here ?

I'm holding 3.0.14 until we get this fixed.  The other issue
to work on is ACCESS_DENIED messages in winbindd when using domain
mode security in a native Win2003 SP1 domain.  This is apparently
an schannel change in sp1.

cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCVfJtIR7qMdg1EfYRAoPDAKDtyZ5/ul6+bgN3qOQ6CrKvIlzqdACgl1Ki
U38nyoSGS8nIj0xrFn3NsWE=
=Kmkc
-----END PGP SIGNATURE-----