[Samba] pdbedit -Lw reports "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" for password

[Andrew Bartlett]

On Wed, 2005-02-23 at 13:57 -0500, Marshall Herington wrote:
> I've searched google and the samba archives to no avail (appologies if
> I've missed something), so I will ask the community directly:
> 
> I am trying to convert a fully populated smbpasswd file to the tdbsam backend:
> 
> # pdbedit -i smbpasswd:./smbpasswd -e tdbsam:./passdb.tdb
> 
> This seems to work, on the surface, but upon inspection I find that 
> 
> # pdbedit -Lw username
> 
> username:1234:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[DU
>     ]:LCT-00000000:

The LCT-00000 is the giveaway - this is an invalid last-change-time, and
Samba uses this as a key to disable the account, and wipe the password.
See the Samba 3.0.2a release notes.

Grab your copy of emacs, and if these accounts really should have
passwords, just set the LCT value to anything other than 0 (ie 1).

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20050224/465ac73a/attachment.bin