[Samba] Password change on Windows 2000 clients not working

[james at jsquared.ca]

Hello, I have searched hi and lo for a solution to being unable to
change passwords from Windows 2000.  Everything seems to work fine,
shares, etc.  but when I press ctrl-alt-del to bring up the Change
Password dialogue, I get the message that "The user doesn't exist or the
password was entered incorrectly" from Windows.  

I am running Samba 2.2.3a on Mandrake Linux 8.2

In my logs, I see the following at the computer I was testing on:

[2002/08/08 18:47:17, 0] smbd/chgpasswd.c:chgpasswd(474)
  Password Change: user sralph, New password is shorter than minimum
password length = 5
[2002/08/08 18:47:19, 0] smbd/chgpasswd.c:chgpasswd(474)
  Password Change: user sralph, New password is shorter than minimum
password length = 5
[2002/08/08 18:47:24, 0] smbd/chgpasswd.c:check_oem_password(817)
  check_oem_password: incorrect password length (-1576411271).
[2002/08/08 18:48:03, 0] smbd/chgpasswd.c:check_oem_password(817)
  check_oem_password: incorrect password length (-1576411277).

This is using the commented out "passwd chat" line.  Using the original
"passwd chat" line that is listed below, these errors were logged:

[2002/07/22 17:03:24, 0] smbd/chgpasswd.c:chgpasswd(541)
  chgpasswd: Running as root the 'passwd program' parameter *MUST*
contain the string %u, and the given string /bin/passwd does not.
[2002/07/22 17:03:44, 0] smbd/chgpasswd.c:chgpasswd(541)
  chgpasswd: Running as root the 'passwd program' parameter *MUST*
contain the string %u, and the given string /bin/passwd does not.
[2002/07/22 17:04:02, 0] smbd/chgpasswd.c:check_oem_password(878)
  check_oem_password: old nt password doesn't match.
[2002/07/22 17:04:26, 0] smbd/chgpasswd.c:chgpasswd(474)
  Password Change: user sralph, New password is shorter than minimum
password length = 5
[2002/07/22 17:05:24, 0] smbd/chgpasswd.c:chgpasswd(541)
  chgpasswd: Running as root the 'passwd program' parameter *MUST*
contain the string %u, and the given string /bin/passwd does not.
[2002/07/22 17:05:31, 0] smbd/chgpasswd.c:check_oem_password(817)
  check_oem_password: incorrect password length (-614147710).

Here is my smb.conf file [global] section

#Samba Configuration file
[global]
  #PDC Specific
  workgroup = pjglease.com
  netbios name = serve-on
  server string = Workgroup Server

  security = user
  encrypt passwords = yes

  smb passwd file = /etc/samba/smbpasswd
  unix password sync = yes
  passwd chat debug = true
  passwd program = /bin/passwd %u
  passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n
*passwd:*all*authentication*tokens*updated*successfully*
  #passwd chat =  *new password* %n\n *new password* %n\n *changed*

  local master = yes
  os level = 34
  domain master = yes
  preferred master = yes
  domain logons = yes
  logon script = logon.bat

  # auto-add machine accounts
  add user script = /usr/sbin/useradd -d /dev/null -g machines -c
'Machine Account' -s /bin/false -M %u

  #Logs
  log file = /var/log/samba/log.%m
  max log size = 50

  #Optimizations
  socket options = SO_RCVBUF=8192
  socket options = SO_SNDBUF=8192
  socket options = TCP_NODELAY

  #naming
  wins support = yes
  name resolve order = wins lmhosts hosts bcast

  #Home Dirs
  logon drive = Z:
  logon home = \\serve-on\%u

  #printing
  #printcap name = lpstat
  #load printers = yes
  #printing = cups

Hope someone out there can make sense of this email and what's going on
... and if you can, that would be fantastic!


James Herschel
JSquared Network Solutions
(905)847-0799
james at jsquared.ca