[Samba] passwd sync - troubles

[Terry Davis]

Indeed I am running with 'encrypt passwords = yes'.  When windows sends
the OLD password across, what format is it in?  In other words, should
it be matched with my lmpasswd, ntpasswd, or clear in the ldap?  I am
considering sniffing this problem out.  I am 100% certain I did not
mistype the password as I changed and re-typed it close to 20 times
(while examining logs and such).  

Just to be more clear, I am using the 'passwords' utility in windows 98
and checking 'windows networking' to change the local and smb/ldap
password.

Thank you!

On Mon, 2002-03-11 at 06:38, Andrew Bartlett wrote:
> Mac wrote:
> > 
> > >From: Terry Davis <tdavis at approbation.org>
> > >To: samba at lists.samba.org
> > >Subject: [Samba] passwd sync - troubles
> > >Date: 11 Mar 2002 01:58:00 -0600
> > >
> > >Hello,
> > >
> > >I am trying to change my passwd via windows password utility.  Here is
> > >what I have set:
> > >
> > >I have verified that the chat is correct.  And the passwd program works
> > >standalone fine.  In my logs, i am seeing:
> > >[2002/03/11 01:11:26, 0] smbd/chgpasswd.c:check_oem_password(817)
> > >  check_oem_password: incorrect password length (-1461780121).
> > 
> > Bit cryptic isn't it.
> > 
> > It means (you're gonna love this), that the old SMB password supplied
> > when you made the change password request was wrongly typed (more or
> > less)
> > 
> > This is based on my own testing and mightnot be exactly accurate, but
> > seems to correlate in all the tests I've done.
> 
> This is correct.  The old password is used to decrypt the new password. 
> The test for a successful decryption is the 'password length' being set
> correctly.  
> 
> Ensure you are running with 'encrypt passwords = yes'.
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett                                 abartlet at pcug.org.au
> Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
> Student Network Administrator, Hawker College   abartlet at hawkerc.net
> http://samba.org     http://build.samba.org     http://hawkerc.net
-- 
Terry Davis
http://approbation.org/