unix password sync

[zorang at ozemail.com.au]

Hi Samba Folks!

I am having trouble using the "unix password sync" feature.

I try to use smbpasswd to change both the smbpasswd and UNIX passwords. When I
run smbpasswd as root to change a users password it changes the samba password 
but not the UNIX password. I would have expected the "unix apssword sync" feature
to change both passwords. "smbpasswd username" runs without errors.


My Environment:
	AIX 4.3.2
	Samba 2.0 (Downloaded AIX binary from samba.org yesterday)

My smb.conf
 	   workgroup = MYGROUP
           server string = Samba Server
           encrypt passwords = Yes
           passwd chat = *Old*password* %o\n *New*password* %n\n *new*password* %n\n
           passwd chat debug = Yes
           unix password sync = Yes
           log level = 100
           log file = /var/log/samba/log.%m
           max log size = 50
           printcap name = /etc/printcap
           dns proxy = No


Output when sbmpasswd run in debug mode:

# smbpasswd -D 100 username
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 50
doing parameter printcap name = /etc/printcap
doing parameter dns proxy = No
pm_process() returned Yes
lp_servicenumber: couldn't find homes
codepage_initialise: client code page = 850
load_client_codepage: loading codepage 850.
Adding chars 0x85 0xb7 (l->u = True) (u->l = True)
Adding chars 0xa0 0xb5 (l->u = True) (u->l = True)
Adding chars 0x83 0xb6 (l->u = True) (u->l = True)
Adding chars 0xc6 0xc7 (l->u = True) (u->l = True)
Adding chars 0x84 0x8e (l->u = True) (u->l = True)
Adding chars 0x86 0x8f (l->u = True) (u->l = True)
Adding chars 0x91 0x92 (l->u = True) (u->l = True)
Adding chars 0x87 0x80 (l->u = True) (u->l = True)
Adding chars 0x8a 0xd4 (l->u = True) (u->l = True)
Adding chars 0x82 0x90 (l->u = True) (u->l = True)
Adding chars 0x88 0xd2 (l->u = True) (u->l = True)
Adding chars 0x89 0xd3 (l->u = True) (u->l = True)
Adding chars 0x8d 0xde (l->u = True) (u->l = True)
Adding chars 0xa1 0xd6 (l->u = True) (u->l = True)
Adding chars 0x8c 0xd7 (l->u = True) (u->l = True)
Adding chars 0x8b 0xd8 (l->u = True) (u->l = True)
Adding chars 0xd0 0xd1 (l->u = True) (u->l = True)
Adding chars 0xa4 0xa5 (l->u = True) (u->l = True)
Adding chars 0x95 0xe3 (l->u = True) (u->l = True)
Adding chars 0xa2 0xe0 (l->u = True) (u->l = True)
Adding chars 0x93 0xe2 (l->u = True) (u->l = True)
Adding chars 0xe4 0xe5 (l->u = True) (u->l = True)
Adding chars 0x94 0x99 (l->u = True) (u->l = True)
Adding chars 0x9b 0x9d (l->u = True) (u->l = True)
Adding chars 0x97 0xeb (l->u = True) (u->l = True)
Adding chars 0xa3 0xe9 (l->u = True) (u->l = True)
Adding chars 0x96 0xea (l->u = True) (u->l = True)
Adding chars 0x81 0x9a (l->u = True) (u->l = True)
Adding chars 0xec 0xed (l->u = True) (u->l = True)
Adding chars 0xe7 0xe8 (l->u = True) (u->l = True)
Adding chars 0x9c 0x0 (l->u = False) (u->l = False)
Derived broadcast address 9.255.255.255
Added interface ip=9.3.240.215 bcast=9.255.255.255 nmask=255.0.0.0
New SMB password:
Retype new SMB username:
startsmbfilepwent: opening file /usr/local/samba/private/smbpasswd
search by name: username
startsmbfilepwent: opening file /usr/local/samba/private/smbpasswd
getsmbfilepwent: skipping comment or blank line
getsmbfilepwent: skipping comment or blank line
getsmbfilepwent: skipping comment or blank line
getsmbfilepwent: returning passwd entry for user root, uid 0
getsmbfilepwent: entry invalidated for user daemon
getsmbfilepwent: entry invalidated for user bin
getsmbfilepwent: entry invalidated for user sys
getsmbfilepwent: entry invalidated for user adm
getsmbfilepwent: entry invalidated for user uucp
getsmbfilepwent: entry invalidated for user guest
getsmbfilepwent: entry invalidated for user nobody
getsmbfilepwent: entry invalidated for user lpd
getsmbfilepwent: entry invalidated for user nuucp
getsmbfilepwent: entry invalidated for user imnadm
getsmbfilepwent: returning passwd entry for user username, uid 201
found by name: username
endsmbfilepwent: closed password file.
mod_smbfilepwd_entry: opening file /usr/local/samba/private/smbpasswd
mod_smbfilepwd_entry: skipping comment or blank line
mod_smbfilepwd_entry: skipping comment or blank line
mod_smbfilepwd_entry: skipping comment or blank line
mod_smbfilepwd_entry: entry exists
endsmbfilepwent: closed password file.
Password changed for user username
# 

In could not find anything relating to passwords in log.smb and log.<systemname>.

Also, interesting that testparm reports the following errors even though all 
changes to smb.conf were done though swat:
	ERROR: the 'passwd chat' script [*Old*password* %o\n *New*password* %n\n *new*password* %n\n] 
        expects to use the old plaintext password via the %o substitution. With encrypted passwords this is not possible.
(I modified the password chat for AIX)


My Questions are:

1. Is there something obviously wrong with my configuration?
2. Does smbpasswd always work in a client-server mode where the change of both passwords
   is performed by smpd?

Any suggestions are welcome.


Zoran Gagic (zorang at ozemail.com.au)

__________________________________________________________
Message sent by MyMail http://www.mymail.com.au/