[Samba] passwd: Authentication token manipulation error

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 2 Feb 2003, John H Terpstra wrote:

> On Sun, 2 Feb 2003, Thorsten D. Marsen wrote:
> 
> > Hi John,
> >
> > > The smbpasswd utilitiy only changes the password in /etc/samba/smbpasswd.
> > > It does NOT use PAM at all.
> > >
> > > The system tool 'passwd' (/bin/passwd or /usr/bin/passwd) will use PAM.
> > > Whatever you configure PAM to do it will follow.
> > >
> > > Firstly, pam_smbpass.so does NOT do unix system password changing! It can
> > > be added to your PAM configuration to update the /etc/samba/smbpasswd
> > > file.
> >
> > In the case LDAP is configured, smbpasswd will change the lm/ntPassword
> > Fields in the Samba Schemata instead of /etc/samba/smbpasswd. Do you know if
> > pam_smbpass.so also regognizes this configuration?
> 
> No. pam_smbpass.so is a PAM module that directly acts on the
> /etc/samba/smbpasswd file.

No John.  Thorsten is right.  If compiled with --with-ldapsam, 
pam_smbpass.so will change the lm/nt password atribute in an LDAP 
directory.  The reason is that pam_smbpass uses the pdb interface for
updating account information.




cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+Pr+wIR7qMdg1EfYRAkoBAJ9GP2lsT6ibiNOyO4zz30ptJ74B9wCglHf9
aDnBlokdcRurjMAXciFrAbo=
=8zwK
-----END PGP SIGNATURE-----