[Samba] Windows password change issue

Bill Bierman wbierman at IfA.Hawaii.Edu
Mon Sep 25 22:53:34 GMT 2006

Hello.  I am using Samba 3.0.22 with LDAP.  When a user's password 
expires they are asked to change it by Windows 2000.

Upon completing the pw change dialog box, after a brief pause, I get an 
error stating "The system cannot change your password now because the 
domain MYGROUP is not available." -- where MYGROUP is my domain name.

Any thoughts on why this is occuring?  I can provide additional logfile 
information if needed.


My smb.conf file:

workgroup = MYGROUP
domain logons = yes
security = user
local master = yes
os level = 65
preferred master = yes
domain master = yes

log file = /var/log/samba/%m.log

passdb backend = ldapsam:ldap://localhost
ldap admin dn = "cn=Manager,dc=ifa,dc=hawaii,dc=edu"
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap suffix = dc=ifa,dc=hawaii,dc=edu

add machine script = /usr/sbin/smbldap-useradd -w "%u"

logon path = \\%L\profiles\%U

printable = no

unix password sync = yes
passwd program = /usr/sbin/smbldap-passwd -u "%u"
passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new 
password*" %n\n"
ldap passwd sync = yes

  comment = The domain logon service
  path = /var/lib/samba/netlogon
  public = no
  writeable = no

  create mode = 0600
  directory mode = 0700
  path = /home/profiles
  read only = no
  profile acls = yes

More information about the samba mailing list