[Samba] Re: password change error

[Igor Belyi]

Can you be a little bit more specific?

What do you mean by 'users cannot change their passwords"? Does it mean 
that they cannot change it via Windows' "Change Password" dialog? What 
error message they get? Can Administrator do it for them? Can they 
change it under Linux with smbpasswd? Is there any error messages in 
smbd logs?

Igor

Gurnish Anand wrote:
> Hi,
>  We migrated from redhat 7.1 to redhat 3 ES and ran into one road block 
> after the other.
> Most of them were solved except this last one.
> Users cannot change their passwords and then I read somewhere that samba 
> 3.0 and MS KB828471 or 741 don't want to be friends. Then I upgraded my 
> samba to be samba 3.0.7 (which i guess is the latest)....
> 
> Then I un-installed the KBB patch being accused. Still cannot change my 
> passwords. Please adviceeeee............................. The following 
> is my smb.conf
> 
> 
> # Global parameters
> [global]
>        workgroup = sambapdc
>        netbios name = PCSERVER
>        server string = primary domain server running samba%v
>        min password length = 6
> ;       obey pam restrictions = Yes
>        pam password change = Yes
> ;       username map = /etc/passwd
>        smb passwd file = /etc/samba/smbpasswd
>        passwd program = /usr/bin/passwd %u
>        encrypt passwords = yes
>        passwd chat = *New*Unix*Password* %n\n 
> *Retype*new*Unix*password*%n\n *passwd: all authentication tokens 
> updated successfully* %n
>        passwd chat debug = Yes
>        username level = 10
>        unix password sync = Yes
>        log level = 2
>        case sensitive = no
>        log file = /var/log/samba/log.%m
>        max log size = 50
>        time server = Yes
>        unix extensions = Yes
>        socket options = TCP_NODELAY SO_KEEPALIVE IPTOS_LOWDELAY 
> SO_SNDBUF=8192 SO_RCVBUF=8192
>        admin users = worldofbanking\gurnish,  @employee, administrator, 
> @administrators
>        add user script = /usr/sbin/useradd -d /dev/null -g machines -c 
> 'Machine Account' -s /bin/false -M %u
>        logon script = netlogon.bat
>        logon path = \\%L\profile\%u.pds
>        logon home =
>        domain logons = Yes
>        os level = 64
>        preferred master = Yes
>        domain master = yes
>        wins support = Yes
>        hosts allow = 127.0.0.1 192.168.2.0/255.255.255.0
> ;       password server = None
>        hosts deny = 0.0.0.0/0 @web 192.168.2.200
> 
> [profile]
>        path = /home/samba/profile
>        force user = %U
>        writeable = yes
>        create mask = 0600
>        directory mask = 0700
>        guest ok = Yes
>        profile acls = Yes
>        browseable = No
>        csc policy = disable
> 
> [netlogon]
>        path = /home/samba/netlogon
>        write list = root @administrator
>        browseable = No
> 
> [pcshare]
>        path = /home/samba
>        writeable = yes
>        create mask = 07777
>        directory mask = 07777
>        guest ok = Yes
> 
> [Wywo]
>        path = /home/samba/WYWO
>        writeable = yes
>        create mask = 07777
>        directory mask = 07777
>        guest ok = Yes
> 
> [temp]
>        path = /home/samba/temp
>        writeable = yes
>        create mask = 07777
>        directory mask = 07777
>        guest ok = Yes
> 
> 
> [Docs]
>        path = /home/samba/MB/DOCS
>        writeable = yes
>        create mask = 07777
>        directory mask = 07777
> 
> [epsonprint]
>        path = /tmp
>        printable = Yes
> [root at apps root]#
> 
>