[Samba] Changing password from Windows 2K / XP client on samba server
with different passwords on client and server
Andreas Hartmann
andreas.hartmann at fiducia.de
Wed Feb 19 15:21:27 GMT 2003
Hello all,
I've got a problem when I try to change a password from W2K or XP on a samba
2.2.5 - server. That's the situation:
The user "hugo" is logged on locally or in a domain "first" with his password
"secret". The user has shares on a secound domain, the "samba" domain, too.
The user can do a
net use M: \\samba\share
to get the share on the samba domain.
This works fine, no matter if the passwords for hugo are the same or not in the
two domains or locally, because Windows asks for the correct password if the
password sent with the net use command is wrong.
Totally different if hugo tries to change the password on the samba domain.
This does only work, if the existing passwords on the client or first domain and
on the samba domain are the same.
If the user wants to change the password on the samba domain after one
successfull password change again (-> the passwords on the client and on the
samba domain are different now), the samba server says, that the password it got
would be wrong - but the user has provided the correct password and username
hugo for the samba domain in the password change dialog in windows.
I would be very glad to get some information to resolve this problem :-).
Regards,
Andreas Hartmann
------------------------------------------------------------------------
smb.conf
[global]
workgroup = Workgroup
server string = Samba Server on samba
encrypt passwords = Yes
smb passwd file = /etc/samba/smbpasswd
min passwd length = 8
obey pam restrictions = Yes
pam password change = Yes
security = user
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
username map = /etc/samba/smbusers
unix password sync = No
log level = 2
log file = /var/log/samba/%m.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
character set = ISO8859-1
client code page = 850
domain admin group = root xca1015
domain logons = Yes
os level = 64
preferred master = True
domain master = True
dns proxy = Yes
wins support = Yes
create mask = 0774
directory mask = 0775
inherit acls = Yes
map system = Yes
map hidden = Yes
csc policy = disable
The logfile says:
[2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575)
pass_check_smb failed - invalid password for user [hugo]
[2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(972)
NT Password did not match for user 'hugo'!
[2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(982)
Defaulting to Lanman password for hugo
[2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575)
pass_check_smb failed - invalid password for user [hugo]
[2003/02/19 16:19:28, 1] smbd/reply.c:reply_sesssetup_and_X(998)
Rejecting user 'hugo': authentication failed
[2003/02/19 16:19:28, 2] smbd/server.c:exit_server(461)
Closing connections
[2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575)
pass_check_smb failed - invalid password for user [hugo]
[2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(972)
NT Password did not match for user 'hugo'!
[2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(982)
Defaulting to Lanman password for hugo
[2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575)
pass_check_smb failed - invalid password for user [hugo]
[2003/02/19 16:19:28, 1] smbd/reply.c:reply_sesssetup_and_X(998)
Rejecting user 'hugo': authentication failed
[2003/02/19 16:19:28, 2] smbd/server.c:exit_server(461)
Closing connections
[2003/02/19 16:19:28, 0] lib/util_sec.c:assert_gid(114)
Failed to set gid privileges to (0,65533) now set to (0,-1) uid=(0,65534)
[2003/02/19 16:19:28, 0] lib/util.c:smb_panic(1094)
PANIC: failed to set gid
[2003/02/19 16:19:29, 0] lib/util_sec.c:assert_gid(114)
Failed to set gid privileges to (0,65533) now set to (0,-1) uid=(0,65534)
[2003/02/19 16:19:29, 0] lib/util.c:smb_panic(1094)
PANIC: failed to set gid
More information about the samba
mailing list