Bug 2874 - Password change -- Wbinfo and Winbind allow BOTH OLD & NEW passwords to work..

[Brian Moran]

One of our employees is seeing that BOTH old and new passwords work just
after he's changed his password on the domain...

 

<Change domain password on domain to which his Linux workstation is
joined>

 

wbinfo -a CORP+aglabek%<new password>

challenge/response password authentication succeeded

 

wbinfo -a CORP+aglabek%<old password>

challenge/response password authentication succeeded

 

wbinfo -a CORP+aglabek%<some random characters (bad password)>

challenge/response password authentication failed

 

Looks like this is the same as 2874. What additional information is
required to verify and squash this one?

 

 

Brian Moran

 

Centeris Corporation

15405 SE 37th St.     Bellevue, WA  98006

425-378-7887 

206-390-4376 cell