Strange behaviour with domain login

[Christian Barth]

Hello!

I think it's like this


> Hi there,
> 
> I have Samba 1.9.18p18 installed on Linux (S.u.S.E. 5.3). It
> is configured to act as a domain controler for the Windoze
> machines.
> 
> One of my users, which can login from his Win95 (plain text
> password) without problems, wants to change his password
> from the Control Panel. But every time when he logs out
> after changing his password and re-logs in, the new password
> is refused by the server. Instead he has to use his old
> password.
> 
> I looked at the smbpasswd file. It changes, when the user
> changes his password, but during the login it changes again!
Changes his password in ../private/smbpasswd *not* in /etc/passwd.
The last is used for "plain text password"-Access-Controll.

> It seems to me that Windoze has the old password in its
> cache and changes the smbpasswd file according to its cache
> during login (I think I've red something about Windoze cache
> on the Internet, but don't remember where).
> 
> What can I do to overcome this problem? Just reboot the
> machine (standard MS procedure)?
> 
> TIA
> Martin
> 
> 
> my smb.conf (important parts):
> [global]
>         smb passwd file = /samba/samba/smbpasswd
> 
>         ; security options
>         guest account = nobody
>         security = user
>         encrypt passwords = no
>         update encrypted = yes
On the next logon, Win95 sends the old plain-Text-Password, which has 
to be used, because "see above", and the encryted one is updated back 
to the old.

try "unix passwd sync = yes"


> 
>         local master = yes
>         domain logons = yes
>         domain master = yes
>         preferred master = yes
>         wins support = yes
>         time server = yes
>         os level = 65
> 
>         ; filename handling
>         case sensitive = no
>         mangle case = no
>         dos filetimes = yes
>         dos filetime resolution = yes
>         preserve case = yes
>         short preserve case = yes
>         character set = iso8859-1
> 
>         ; optimizing options
>         socket options = TCP_NODELAY
>         getwd cache = yes
>         oplocks = yes
>         fake oplocks = no
>         keep alive = 30
>         dead time = 15
>         read prediction = yes
> 
> -------------------------------------
> Martin Geigl
> Universitaet Greifswald
> Institut fuer Physik
> Domstr. 10a
> 17489 Greifswald
> Tel.: +49-3834-864745
> Fax: +49-3834-864701
> -------------------------------------

Hope this helps,

Christian
 



_____________________________________________________________

  Dipl.-Wirtsch.-Ing. Christian Barth

  Universitaet Kaiserslautern  
  Lehrstuhl fuer Fertigungstechnik und Betriebsorganisation
  Abteilung Fertigungstechnologie
  Raum 42/472

  Postfach 3049
  67655 Kaiserslautern
  Telefon 0631/205-2872
  Telefax 0631/205-3238
  email   barth at cck.uni-kl.de