Fw: [Samba] Forcing password changes using SAMBA as PDC

[Enrico Payne]

Hi, I did as suggested, and still have the same problem.

I am still able to login to samba with another users password that does not
require password changes. This seems to me that the problem is related to
PAM password changing. I have tried change the various PAM options in the
smb.conf file, but cannot get it to work. Depending on the options, it
either asks for a password or not. When it asks for the password, I get the
cannot find the domain error on the client and the PAM ERROR 12 on the
syslog.

Regards
Enrico
----- Original Message ----- 
From: "Andrew Bartlett" <abartlet at samba.org>
To: "Enrico Payne" <enricop at pharma.co.za>
Cc: <samba at lists.samba.org>; "John H Terpstra" <jht at samba.org>; "Andreas"
<andreas at conectiva.com.br>; "Andrew Bartlett" <abartlet at samba.org>
Sent: Thursday, August 28, 2003 4:29 PM
Subject: Re: [Samba] Forcing password changes using SAMBA as PDC


> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba


-
___________________________________________
This e-mail has been scanned for viruses.
Pharma Natura will not be held responsible
for the loss of data or any other loss
caused by the use of the information
contained in this e-mail.
-------------- next part --------------
On Thu, 2003-08-28 at 18:08, Enrico Payne wrote:
> Hello
> 
> > The issue of why PAM is now rejecting the account is up to PAM - can you
> > log in with SSH on this account now?  (With and without an SSH key).
> 
> I can ssh to the machine from the windows client using the account.

Then make sure your PAM configuration for SSH is the same as for Samba.

> > You should use 'pam password change' when using PAM based systems, it is
> > much more reliable than the 'talk to /bin/passwd' method, and will give
> > you better error reports.
> 
> Where do I make this change and how/what do I change? My knowlege of PAM is
> less than zero.

This is an smb.conf option - but if you are not confident with PAM, then
I suggest you avoid the issue of PAM restrictions and password sync.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net