Users can't change their own password...

MCCALL,DON (HP-USA,ex1) don_mccall at hp.com
Fri Jan 5 14:28:34 GMT 2001


Hello Chad,
Based on the error message I see, try this: 
Set your guest account = to a valid unix user. (if guest account = nothing,
then samba defaults to using user 'nobody' which you may have for security
reasons removed from your etc/passwd file.
Hope this helps,
Don
-----Original Message-----
From: Horanburg, Chadd (ISS Southfield) [mailto:CHoranburg at iss.net]
Sent: Friday, January 05, 2001 5:25 AM
To: Samba (E-mail)
Subject: Users can't change their own password...


Hello,

I've recently put Samba into production, and while I do love it, I am having
a problem I can not figure out. It comes when a regular user tries to change
their password. I have dug through the FAQ's I could find, and also looked
through a few trouble shooting sections. Everything they suggest checks out.
The server as a whole works great. If I log in as root and change a users
password, that works fine. However, a user is unable to. As for the basic
info, this is running on an Intel platform, using Solaris 7 (X86). I am
using Samba 2.0.7. Below I have pasted the Global Section, minus a few lines
taken out for security. And below that is some excerpts from the logs, along
with the command I ran, minus the actual userid. If anyone has any ideas, I
would love to hear them. I'm open to anything at this point. You can reach
me at choranburg at iss.net

A sincere thanks,
 Chadd

******<Excerpts from [GLOBAL]
[global]
        workgroup = #<blank> we don't use standard NT networking....
        netbios name = xxxxxxx
        encrypt passwords = Yes
        allow trusted domains = No
        restrict anonymous = Yes
        debug level = 3
        log file = /var/adm/samba/log
        max log size = 2000
        logon drive = H:
        local master = No
        guest account =
        valid users = +xxxxx
        admin users = xxxxxxxxxx #(my account)
        read list = +xxxxx
        write list = +xxxxx

my userid is currently 10 digits, would that cause a problem? I've tried
smaller userids, legal on both Sun and NT as far as I know.


*******<Command string used>
% /usr/local/samba/bin/smbpasswd

doing parameter log file = /var/adm/samba/log
doing parameter max log size = 2000
doing parameter logon drive = H:
doing parameter local master = No
doing parameter guest account = 
doing parameter valid users = +xxxxx
doing parameter admin users = xxxxxxxxxx (my account)
doing parameter read list = +xxxxx
doing parameter write list = +xxxxx
pm_process() returned Yes
added interface ip=xxx.xxx.xxx.xxx bcast=xxx.xxx.xxx.255 nmask=255.255.255.0
Old SMB password:
New SMB password:
Retype new SMB password:
Connecting to 127.0.0.1 at port 139
machine 127.0.0.1 rejected the session setup. Error was : ERRSRV - ERRbadpw
(Bad password - name/password pair in a Tree Connect or Session Setup are
invalid.).
Failed to change password for xxxxxxxxxx


*******<Excerpt from the Logs, my guess as to what the problem is.>

[2000/11/22 04:23:07, 3] param/loadparm.c:lp_load(2805)
  pm_process() returned Yes
[2000/11/22 04:23:07, 3] param/loadparm.c:lp_add_ipc(1594)
  adding IPC service
[2000/11/22 04:23:07, 2] lib/interface.c:add_interface(83)
  added interface ip=xxx.xxx.xxx.xxx bcast=xxx.xxx.xxx.255
nmask=255.255.255.0
[2000/11/22 04:23:07, 0] lib/util_sock.c:set_socket_options(151)
  Failed to set socket option SO_KEEPALIVE (Error Bad file number)
[2000/11/22 04:23:07, 0] lib/util_sock.c:set_socket_options(151)
  Failed to set socket option TCP_NODELAY (Error Bad file number)
[2000/11/22 04:23:07, 2] smbd/server.c:main(746)
  Changed root to /
[2000/11/22 04:23:07, 3] smbd/oplock.c:open_oplock_ipc(86)
  open_oplock_ipc: opening loopback UDP socket.
[2000/11/22 04:23:07, 3] lib/util_sock.c:open_socket_in(875)
  bind succeeded on port 0
[2000/11/22 04:23:07, 3] smbd/oplock.c:open_oplock_ipc(114)
  open_oplock ipc: pid = 8517, global_oplock_port = 32805
[2000/11/22 04:23:07, 3] smbd/process.c:process_smb(618)
  Transaction 0 of length 76
[2000/11/22 04:23:07, 2] smbd/reply.c:reply_special(97)
  netbios connect: name1=127.0.0.1        name2=SERVER
[2000/11/22 04:23:07, 3] smbd/process.c:process_smb(618)
  Transaction 1 of length 168
[2000/11/22 04:23:07, 3] smbd/process.c:switch_message(448)
  switch message SMBnegprot (pid 8517)
[2000/11/22 04:23:07, 3] smbd/negprot.c:reply_negprot(341)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2000/11/22 04:23:07, 3] smbd/negprot.c:reply_negprot(341)
  Requested protocol [MICROSOFT NETWORKS 1.03]
[2000/11/22 04:23:07, 3] smbd/negprot.c:reply_negprot(341)
  Requested protocol [MICROSOFT NETWORKS 3.0]
[2000/11/22 04:23:07, 3] smbd/negprot.c:reply_negprot(341)
  Requested protocol [LANMAN1.0]
[2000/11/22 04:23:07, 3] smbd/negprot.c:reply_negprot(341)
  Requested protocol [LM1.2X002]
[2000/11/22 04:23:07, 3] smbd/negprot.c:reply_negprot(341)
  Requested protocol [Samba]
[2000/11/22 04:23:07, 3] smbd/negprot.c:reply_negprot(424)
  Selected protocol NT LANMAN 1.0
[2000/11/22 04:23:07, 3] smbd/process.c:process_smb(618)
  Transaction 2 of length 78
[2000/11/22 04:23:07, 3] smbd/process.c:switch_message(448)
  switch message SMBsesssetupX (pid 8517)
[2000/11/22 04:23:07, 3] smbd/reply.c:reply_sesssetup_and_X(805)
  Domain=[]  NativeOS=[Unix] NativeLanMan=[Samba]

[2000/11/22 04:23:07, 3] smbd/reply.c:reply_sesssetup_and_X(809)
  sesssetupX:name=[] <---- is this what could be causing it??? I don't know
why it's blank

[2000/11/22 04:23:07, 3] smbd/reply.c:reply_sesssetup_and_X(952)
  No such user  - using guest account
[2000/11/22 04:23:07, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Username  is invalid on this system

Please email any advice you may have to choranburg at iss.net, it is most
greatly appreciated.



*********************************************************
Chadd M. Horanburg
Internet Security Systems
Managed Intrusion Detection Systems,
Intrusion Detection Technician
3000 Town Center Dr
Suite 1100
Southfield, MI 48075
P. 877-563-8739 F. 248-352-0301
choranburg at iss.net
PGP Key available from standard key servers

Internet Security Systems - The power to protect
*********************************************************





More information about the samba mailing list