[Samba] Strange NT_STATUS_PASSWORD errors after upgrade to 3.0.26a

[Duncan Brannen]

Thanks John,
             Setting this to 0 (Zero) or not having it present seems to 
work with 3.0.23c but with
3.0.26a I still get the NT_STATUS_PASSWORD_MUST_CHANGE error.

Looking at the code the log points to  (auth/auth_sam.c) line 172  There 
is a change
between 23c and 26a which may or may not point to the answer. It doesn't 
look
obvious to me.


3.0.26a
> if (!(pdb_get_acct_ctrl(sampass) & ACB_PWNOEXP) && 
> !(pdb_get_acct_ctrl(sampass) & ACB_PWNOTREQ)) {
>                 time_t must_change_time = 
> pdb_get_pass_must_change_time(sampass);
>                 time_t last_set_time = 
> pdb_get_pass_last_set_time(sampass);
>
>                 /* check for immediate expiry "must change at next 
> logon" */
>                 if (last_set_time == 0) {
>                         DEBUG(1,("sam_account_ok: Account for user 
> '%s' password must change!.\n", pdb_get_username(sampass)));
>                         return NT_STATUS_PASSWORD_MUST_CHANGE;
>                 }
> # diff samba-3.0.26a/source/auth/auth_sam.c 
> samba-3.0.23c/source/auth/auth_sam.c
> 166c166
> <       if (!(pdb_get_acct_ctrl(sampass) & ACB_PWNOEXP) && 
> !(pdb_get_acct_ctrl(sampass) & ACB_PWNOTREQ)) {
> ---
> >       if (!(pdb_get_acct_ctrl(sampass) & ACB_PWNOEXP)) {
> 171c171
> <               if (last_set_time == 0) {
> ---
> >               if (must_change_time == 0 && last_set_time != 0) {

Cheers,
          Duncan



John Drescher wrote:
> On Nov 15, 2007 12:20 PM, Duncan Brannen <dbb at st-andrews.ac.uk> wrote:
>   
>> Rolling back to 3.0.23c has worked. the error with 3.0.23c was a change
>> made to
>> my account when looking at the 3.0.26a problem as blatantly obvious from
>> the log below.
>>
>>
>> Any ideas as to why 3.0.26a shouldn't be working?  I'm guessing it's
>> something ldap related?
>>
>>     
> I think your problem is that the password expiration is on a per user
> bases in the ldap. The key param is sambaPwdMustChange.
>
> John
>