[Samba] samba 2.2.6 PDC

[Jeffrey R. Meyer]

Hello all,

I am running samba 2.2.6 on my network as a PDC with all the clients being
either win2k or XP.  I have successfully connected the clients to the PDC.
My one problem is that when any of the clients attempt to change their
password via <cntrl>-<alt>-<del> the following error occurs after entering
their current password and the new password twice.

error message:
The User name or old password is incorrect.  Letters in the passwords must
be typed using the correct case.

I have double checked the passwords and everthing is correct.  To add
another twist, if you shutdown and then restart, you must use the new
password to log back in.  Do any of you know how to avoid this problem or
what I must do to eliminate this problem?

Also how do I specify a time limit on the password so my clients are forced
to change them every 60 days?

Here is the smb.conf I am currently using:
# /usr/local/etc/smb.conf
# samba configuration file

[global]
# basic server settings
        workgroup = labnet
        netbios name = pdcsrv1
        server string = Samba PDC running %v
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
SO_RCVBUF=8192

# PDC and master browser settings
        os level = 64
        preferred master = yes
        local master = yes
        domain master = yes
        wins support = yes

# security and logging settings
        security = user
        encrypt passwords = yes
        domain logons = yes
        log file = /var/log/samba/log.%m
        log level = 2
        max log size = 50
#       hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0

# user profiles and home directory
        logon home = ""
        logon path = ""
#       logon script = netlogon.bat
        logon script = %u.bat

#sync UNIX passwords
        unix password sync = yes
        smb passwd = /usr/local/private/smbpasswd
        passwd program = /usr/local/bin/smbpasswd %u
        passwd chat = *New*password* %n\n *Retype*new**password* %n\n
*passwd: *
all*authentication*tokens*updated*successfully*

#===Shares===

[homes]
        comment = Home Directories
        browseable = no
        writable = yes

[netlogon]
        path = /home/netlogon
        read only = yes
        write list = jeffm

thanks for your assistance,


Jeff