[Samba] strange error: modify/delete: sambaPwdCanChange: no such value (Success)

[Alex Deiter]

i use samba 3.0.2 with ldapsam backend on two servers:

1. PDC with openldap master server
2. BDC with openldap replica server

on BDC samba log files contain strange errors:

[2004/02/14 00:03:45, 2] passdb/pdb_ldap.c:init_ldap_from_sam(769)
  init_ldap_from_sam: Setting entry for user: hasp$
[2004/02/14 00:03:46, 2] passdb/pdb_ldap.c:ldapsam_update_sam_account(1423)
  ldapsam_update_sam_account: successfully modified uid = hasp$ in the LDAP
database
[2004/02/14 00:03:47, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: hasp$
[2004/02/14 00:03:47, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: hasp$
[2004/02/14 00:03:47, 2] passdb/pdb_ldap.c:init_ldap_from_sam(769)
  init_ldap_from_sam: Setting entry for user: hasp$
[2004/02/14 00:03:47, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1217)
  ldapsam_modify_entry: Failed to modify user dn=
cn=hasp,ou=Computers,dc=komi,dc=mts,dc=ru with: No such attribute
        modify/delete: sambaPwdCanChange: no such value
[2004/02/14 00:03:47, 0] passdb/pdb_ldap.c:ldapsam_update_sam_account(1417)
  ldapsam_update_sam_account: failed to modify user with uid = hasp$, error:
modify/delete: sambaPwdCanChange: no such value (
Success)
[2004/02/14 00:05:05, 2] smbd/server.c:exit_server(558)
  Closing connections

master ldap log:

Feb 14 00:03:45 master slapd[94313]: conn=3946 fd=21 ACCEPT from
IP=1.1.1.1:49789 (IP=0.0.0.0:636)
Feb 14 00:03:46 master slapd[94313]: conn=3946 op=0 BIND
dn="cn=ldapmanager,dc=komi,dc=mts,dc=ru" method=128
Feb 14 00:03:46 master slapd[94313]: conn=3946 op=0 BIND
dn="cn=ldapmanager,dc=komi,dc=mts,dc=ru" mech=SIMPLE ssf=0
Feb 14 00:03:46 master slapd[94313]: conn=3946 op=0 RESULT tag=97 err=0
text=
Feb 14 00:03:46 master slapd[94313]: conn=3946 op=1 MOD
dn="cn=hasp,ou=Computers,dc=komi,dc=mts,dc=ru"
Feb 14 00:03:46 master slapd[94313]: conn=3946 op=1 MOD
attr=sambaPwdCanChange sambaPwdCanChange sambaPwdLastSet sambaPwdLastSet
Feb 14 00:03:46 master slapd[94313]: conn=3946 op=1 RESULT tag=103 err=0
text=
Feb 14 00:03:46 master slapd[94313]: conn=3946 op=2 UNBIND
Feb 14 00:03:46 master slapd[94313]: conn=3946 fd=21 closed
Feb 14 00:03:47 master slapd[94313]: conn=3947 fd=21 ACCEPT from
IP=1.1.1.1:49790 (IP=0.0.0.0:636)
Feb 14 00:03:47 master slapd[94313]: conn=3947 op=0 BIND
dn="cn=ldapmanager,dc=komi,dc=mts,dc=ru" method=128
Feb 14 00:03:47 master slapd[94313]: conn=3947 op=0 BIND
dn="cn=ldapmanager,dc=komi,dc=mts,dc=ru" mech=SIMPLE ssf=0
Feb 14 00:03:47 master slapd[94313]: conn=3947 op=0 RESULT tag=97 err=0
text=
Feb 14 00:03:47 master slapd[94313]: conn=3947 op=1 MOD
dn="cn=hasp,ou=Computers,dc=komi,dc=mts,dc=ru"
Feb 14 00:03:47 master slapd[94313]: conn=3947 op=1 MOD
attr=sambaPwdCanChange sambaPwdCanChange sambaPwdLastSet sambaPwdLastSet
Feb 14 00:03:47 master slapd[94313]: conn=3947 op=1 RESULT tag=103 err=16
text=modify/delete: sambaPwdCanChange: no such value
Feb 14 00:03:47 master slapd[94313]: conn=3947 op=2 UNBIND
Feb 14 00:03:47 master slapd[94313]: conn=3947 fd=21 closed

# pdbedit -v hasp$
Unix username:        hasp$
NT username:          hasp$
Account Flags:        [W          ]
....
Logon time:           0
Logoff time:          Fri, 13 Dec 1901 23:45:51 GMT
Kickoff time:         Fri, 13 Dec 1901 23:45:51 GMT
Password last set:    Sat, 14 Feb 2004 00:48:47 GMT
Password can change:  Sat, 14 Feb 2004 00:48:47 GMT
Password must change: Fri, 13 Dec 1901 23:45:51 GMT

# testparm
Load smb config files from /usr/local/etc/samba/smb.conf
...
Server role: ROLE_DOMAIN_BDC
...
[global]
        dos charset = 866
        unix charset = UTF8
        display charset = UTF8
        workgroup = KOMI
        passdb backend = 'ldapsam:ldapi://%2fvar%2frun%2fopenldap%2fldapi
ldaps://master'
        guest account = guest
        domain logons = Yes
        os level = 255
        preferred master = Yes
        domain master = No
        wins server = 1.1.8.1
        ldap suffix = dc=komi,dc=mts,dc=ru
        ldap admin dn = cn=ldapmanager,dc=komi,dc=mts,dc=ru
        ldap passwd sync = Yes
        ldap delete dn = Yes

Thanks!