Problem with smbpasswd

[Rainer Hauck]

Jeremy Allison wrote:

> Rainer Hauck wrote:
>
> >
> > Great, this solved the problem. Thank you very much.
> >
> > But there are still some questions left open:
> >
> > Why was root allowed to change the password?
> >
>
> Root doesn't go through the client/server mechanism
> unless you explicitly add a -r localhost to the
> smbpasswd line. This is to allow root to update
> a local smbpassword file without needing to know
> a users old password.

I see.

>
>
> > Is there a way to do the 'password sync' with HP-UX 10.20? Where can I find a
> > list which OSs support this feature? All I found in the docs is that not all
> > OSs support it.
> >
>
> Not sure - you will have to look into compiling
> with -DALLOW_CHANGE_PASSWORD with HPUX.
>

That stops with an error, so probably it's not supported.

> > How can I set the debug level for smbpasswd. The command line option '-D'
> > seems to be ignored. To my opinion it takes the debug level from the smb.conf
> > file. This is especially annoying when you are using a high debug level to
> > track some problem because all your users automatically get the debug output
> > when changing their passwords.
> >
>
> Well, by default it takes the debug level from
> smb.conf (as do all the Samba tools). You can
> override it on the smbpasswd command line via the -D
> option.

That's what I thought aswell. The only problem is: It's not working. Here's the
output from my smbpasswd-command:

hpheger1(hauck) /usr/local/samba/bin :-) smbpasswd -D 0
params.c:Parameter() - Ignoring badly formed line in configuration file: bal
setting for a default install
doing parameter message command = /usr/bin/mailx -s 'WINPOPUP: From %f by Samba
%v' rootwin < %s; rm %s
doing parameter lock directory = /usr/local/samba/var/locks
doing parameter locking = yes
doing parameter share modes = yes
doing parameter security = user
doing parameter password level = 0
doing parameter allow hosts = 129.187.214. localhost
doing parameter encrypt passwords = yes
doing parameter socket options = TCP_NODELAY
doing parameter getwd cache = Yes
doing parameter read prediction = True
doing parameter dead time = 20
doing parameter local master = no
doing parameter os level = 0
doing parameter preferred master = no
pm_process() returned Yes
adding IPC service
Old SMB password:
New SMB password:
Retype new SMB password:

It looks like the '-D 0' option is completely ignored. But I don't want to give
this command to my users as long as it generates that kind of debug output. I
don't want to take down my default debug level to 0 aswell.


What's also looking strange to me is that 'smbpasswd -h' gives:

Usage is : smbpasswd [-h] [-D DEBUGLEVEL] [-r machine] [password]

while 'man smbpasswd' says:

smbpasswd [ -a ] [ -r remote_machine ] [ -d DEBUGLEVEL ] [ username ]

So maybe I'm using an old version of smbpasswd?
(I think the new version should be installed automatically when installing samba)

Thank you,

Rainer

>
>
> Jeremy.
>
> --
> --------------------------------------------------------
> Buying an operating system without source is like buying
> a self-assembly Space Shuttle with no instructions.
> --------------------------------------------------------



--
        _  _ _  _ _  _          RAINER HAUCK
        |\/| |\ | |\/|          Institut fuer Informatik / Dept. of CS
        |  | | \| |  |          Ludwig-Maximilians-University Munich
     ======= TEAM =======       Oettingenstr. 67, 80538 Munich, Germany
Munich Network Management Team  Room D01,Phone +49-89-2178-2155,Fax-2262
Muenchner Netz-Management Team  email: hauck at informatik.uni-muenchen.de