check_oem_password: old lm password doesn't match.

Chris Lewicki chrisl at
Sat Feb 6 00:35:27 GMT 1999

	I've been running samba for a while, and just put on Samba 2.0.0 and enabled all
the domain controller support (its great!)
	I've got everyone's account being served off a Solaris 2.6 machine w/ encrypted
passwords, and all the filesharing and print sharing works nicely. I've read all
the FAQs, listserv digests, and although I've seen solutions posted, those fixes
don't seem to work for me.
	When I try to change a password with CTRL-ALT-DEL from the NT machine (NT 4.0
SP3), it gives the message:

check_oem_password: old lm password doesn't match.

even though the password (I'm damn sure) is correct.  The password works for
login, and I can change it via smbpasswd on the UNIX host.

For the FAQ sensitive, I _DO_ have the following related params set:

	allow hosts  = (and the clients of course)
        unix password sync = yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *new*password* %n\n *new*password* %n\n *changed*
        passwd chat debug = yes
        smb passwd file = /opt/samba/private/smbpasswd

As for the password chat -- I've never seen the output of it in the log file.  I
only get as far as the error message. Oddly enough, in my several hours of working
with it last night, it worked *once* (out of about 50 attempts w/ various
configs).  However, it didn't work immediately after that, with no changes to the

I suspect that this is a bug, but if it is, at least you know about it :)

Christopher A. Lewicki KC7NYV 520.977.0758 Maintainer of SEDS.LPL.Arizona.EDU
     Program Manager, University of Arizona Student Satellite Project

More information about the samba mailing list