[Samba] pam_winbind says I need new password

[Michael Gasch]

known bug, they work on
setting password expiry to "none" but a date far in the future should 
circumvent this problem

micha

Matt Sellers wrote:
> Hello all,
> 
> I have a pretty large DC and am using winbind for our linux workstations 
> and
> im having a preculiar issue. Not all accounts but some...including mine are
> recieving the pam error to change password.
> 
> example...
> 
> ...
> WARNING: Your password has expired.
> You must change your password now and login again!
> Changing password for user msellers.
> Changing password for msellers
> (current) NT password:
> 
> Changing my password works, but reconnecting results in the same prompt,
> thus going over and over again.
> 
> Aug 15 16:02:38 ctilinux2 pam_winbind[1081]: user 'msellers' granted access
> Aug 15 16:02:38 ctilinux2 pam_winbind[1081]: user 'msellers' OK
> Aug 15 16:02:38 ctilinux2 pam_winbind[1081]: pam_sm_acct_mgmt success but
> PAM_WINBIND_NEW_AUTHTOK_REQD is set
> Aug 15 16:02:38 ctilinux2 pam_winbind[1081]: user 'msellers' needs new
> password
> 
> Im never able to login with this account.  Ive looked at debug 10 of 
> winbind
> and cant see anything exciting.  Ive seen a few posts in the past but no
> resolutions.... any ideas?
> 
> Thanks Much!
> Matt Sellers

-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
        49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399