[Samba] Forcing password changes using SAMBA as PDC

[Andrew Bartlett]

On Thu, 2003-08-28 at 00:46, John H Terpstra wrote:
> Enrico,
> 
> Please test this with release candidate 2 when it is made available.
> If there is still a problem then file a bug report on bugzilla.samba.org.

There is nothing here to wait for RC2.  (This code hasn't changed in
months)

The issue (causing the weird error message) is simply that there is an
incomplete mapping between PAM error codes and NTSTATUS values.  The
table is in lib/pam_errors.c

The issue of why PAM is now rejecting the account is up to PAM - can you
log in with SSH on this account now?  (With and without an SSH key).

You should use 'pam password change' when using PAM based systems, it is
much more reliable than the 'talk to /bin/passwd' method, and will give
you better error reports.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20030827/3617c287/attachment.bin