Changing Samba passwords with Win95

[Christoph Zwerschke]

We are using encrypted passwords with Samba on Solaris,
and we did not set up any domain or domain controller.

Users can log in from WinNT and Win95 workstations.

Users also *can* change their Samba passwords from
WinNT workstations (ctrl-alt-del and "passwords...").

But users *cannot* change their Samba passwords from
Win95 clients. When I type in a Win95 DOS box:

"net password \\sambaserver username oldpwd newpwd"

I always get: "Error 86. Wrong net password."

Even with uppercase usernames and passwords it does not work.

----- the Log says in case of a pwd change with WinNT: -----
Got API command 115 of form <zb16b16WW>
<>(tdscnt=0,tpscnt=58,mdrcnt=0,mprcnt=4)
Doing SetUserPassword
Set password for <username>
SMB Password - pwlen = 16, challenge_done = 0
Checking password for user username (l=16)
get_smbpwd_entry: returning passwd entry for user username, uid 1005
size=59
----- the Log says in case of a pwd change with Win95: -----
Got API command 115 of form <zb16b16WW>
<>(tdscnt=0,tpscnt=58,mdrcnt=0,mprcnt=4)
Doing SetUserPassword
Set password for <USERNAME>
SMB Password - pwlen = 6, challenge_done = 0
Checking password for user username (l=6)
get_smbpwd_entry: returning passwd entry for user username, uid 1005
check_lanman_password: old password doesn't match.
size=59
--------------------------------------------------------------------------

I am aware of the fact, that two different hashing mechanisms
are used for WinNT (MD4) and Win95 (DES on magic word)
and two different hash values are stored in the smbpasswd.
But if I set the password using "smbpasswd username", both
are set and you should be able to alter remote from Win95.

That "USERNAME" is in uppercase in the log for Win95 is
AFAIS ok, because Win95 mechanism is not case sensitive.

Does anybody know why the remote password change
does not work with Win95?

We are using Samba 1.9.18p8, but with Samba 2.0.3
it looks the same (also not heavily tested).

---------------------------------------------------------------------------
Christoph Zwerschke
Zentrale Universitätsverwaltung Heidelberg Abt 3.1-EDV
E-Mail: christoph.zwerschke at sun1.zuv.uni-heidelberg.de
WWW: http://www.zuv.uni-heidelberg.de/edv/zwerschke/