[Samba] Changing password from Windows 2K / XP client on samba server with different passwords on client and server

Andreas Hartmann andreas.hartmann at fiducia.de
Wed Feb 19 15:21:27 GMT 2003


Hello all,

I've got a problem when I try to change a password from W2K or XP on a samba
2.2.5 - server. That's the situation:

The user "hugo" is logged on locally or in a domain "first" with his password
"secret". The user has shares on a secound domain, the "samba" domain, too.

The user can do a
net use M: \\samba\share
to get the share on the samba domain.

This works fine, no matter if the passwords for hugo are the same or not in the
two domains or locally, because Windows asks for the correct password if the
password sent with the net use command is wrong.

Totally different if hugo tries to change the password on the samba domain.
This does only work, if the existing passwords on the client or first domain and
on the samba domain are the same.
If the user wants to change the password on the samba domain after one
successfull password change again (-> the passwords on the client and on the
samba domain are different now), the samba server says, that the password it got
would be wrong - but the user has provided the correct password and username
hugo for the samba domain in the password change dialog in windows.

I would be very glad to get some information to resolve this problem :-).


Regards,
Andreas Hartmann

------------------------------------------------------------------------

smb.conf

[global]
        workgroup = Workgroup
        server string = Samba Server on samba
        encrypt passwords = Yes
        smb passwd file = /etc/samba/smbpasswd
        min passwd length = 8
        obey pam restrictions = Yes
        pam password change = Yes
        security = user
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
        username map = /etc/samba/smbusers
        unix password sync = No
        log level = 2
        log file = /var/log/samba/%m.log
        max log size = 0
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        character set = ISO8859-1
        client code page = 850
        domain admin group = root xca1015
        domain logons = Yes
        os level = 64
        preferred master = True
        domain master = True
        dns proxy = Yes
        wins support = Yes
        create mask = 0774
        directory mask = 0775
        inherit acls = Yes
        map system = Yes
        map hidden = Yes
        csc policy = disable

The logfile says:

[2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575)
  pass_check_smb failed - invalid password for user [hugo]
[2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(972)
  NT Password did not match for user 'hugo'!
[2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(982)
  Defaulting to Lanman password for hugo
[2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575)
  pass_check_smb failed - invalid password for user [hugo]
[2003/02/19 16:19:28, 1] smbd/reply.c:reply_sesssetup_and_X(998)
  Rejecting user 'hugo': authentication failed
[2003/02/19 16:19:28, 2] smbd/server.c:exit_server(461)
  Closing connections
[2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575)
  pass_check_smb failed - invalid password for user [hugo]
[2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(972)
  NT Password did not match for user 'hugo'!
[2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(982)
  Defaulting to Lanman password for hugo
[2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575)
  pass_check_smb failed - invalid password for user [hugo]
[2003/02/19 16:19:28, 1] smbd/reply.c:reply_sesssetup_and_X(998)
  Rejecting user 'hugo': authentication failed
[2003/02/19 16:19:28, 2] smbd/server.c:exit_server(461)
  Closing connections
[2003/02/19 16:19:28, 0] lib/util_sec.c:assert_gid(114)
  Failed to set gid privileges to (0,65533) now set to (0,-1) uid=(0,65534)
[2003/02/19 16:19:28, 0] lib/util.c:smb_panic(1094)
  PANIC: failed to set gid

[2003/02/19 16:19:29, 0] lib/util_sec.c:assert_gid(114)
  Failed to set gid privileges to (0,65533) now set to (0,-1) uid=(0,65534)
[2003/02/19 16:19:29, 0] lib/util.c:smb_panic(1094)
  PANIC: failed to set gid




More information about the samba mailing list