[Samba] passwd change with 3.0.27a

Hans Mayer hans.mayer at ages.at
Fri Nov 30 11:02:25 GMT 2007


dear all 

we are using samba at serveral locations over years successfully. as we 
have 
some problems with acl's we tried to upgrade from 3.0.24 to 3.0.27a 
as fare as we can see, all is working fine, except users cannot change the 
password.
after some seconds a window appears:
"You do not have permission to change your password"

looking in the log seeing the following infos:

[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chgpasswd(462)
  chgpasswd: Password change (as_root=Yes) for user: mtest
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2007/11/30 11:23:55, 3] smbd/uid.c:push_conn_ctx(358)
  push_conn_ctx(113) : conn_ctx_stack_ndx = 1
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(430)
  chat_with_program: Dochild for user mtest (uid=0,gid=0) (as_root = Yes)
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:dochild(200)
  could not read default terminal attributes on pty
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:pop_sec_ctx(356)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/11/30 11:23:55, 0] smbd/chgpasswd.c:chat_with_program(440)
  chat_with_program: Error: dochild() returned 0
[2007/11/30 11:23:55, 2] smbd/chgpasswd.c:expect(285)
  expect: Error 0
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:talktochild(316)
  Response 1 incorrect
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(372)
  chat_with_program: Child failed to change password: mtest
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(404)
  chat_with_program: The process exited with status 1 while we were 
waiting


here are the relevant configs in smb.conf 

[global]
        workgroup = TZB
        netbios name = EG1
        keepalive = 600
        update encrypted = Yes
        idmap backend = ldap:ldap://localhost:389
        passdb backend = ldapsam:ldap://localhost:389
        passwd program = /uni/bin/ldapsync.pl -o %u
        passwd chat = New %n\n new %n\n *changed* \n
        passwd chat timeout = 20
        passwd chat debug = Yes
        unix password sync = yes
        hostname lookups = yes
        log level = 3
        log file = /var/adm/samba/%m.log
        logon script = logon.cmd
        logon path =
        logon drive = F:
        domain logons = Yes
        allow trusted domains = yes
        ldapsam:trusted = yes
        oplock break wait time = 30
        os level = 34
        preferred master = Yes
        domain master = Yes
        local master = Yes
        wins support = Yes
        #wins server = 172.18.60.72
        name resolve order = wins bcast
        host msdfs = No
        guest account = nobody
        ldap suffix = dc=ages,dc=at
        ldap machine suffix = ou=maschinen
        ldap user suffix = ou=people
        ldap group suffix = ou=group
        ldap admin dn = "cn=manager,dc=ages,dc=at"
        ldap ssl = no
        deadtime = 20
        enable privileges = Yes
        admin users = root edvtest installpc barainst
        vscan-clamav:config-file = 
/usr/local/samba3024/lib/vscan-clamav.conf
        printing = bsd
        #Wert in Millisekunden-bei Bedarf bitte anpassen
        ldap replication sleep = 1000
        unix charset = CP850
        display charset = ASCII
        dos charset = CP850
        socket options = 
        time server = yes
        vfs objects = recycle vscan-clamav extd_audit
        acl map full control = Yes
        recycle:keeptree = Yes
        recycle:touch = Yes
        recycle:versions = yes
        recycle:maxsize = 50000000
        recycle:exclude = ~*,*TMP,*tmp,*temp,*.o,*.obj,~$*,*.~??
        recycle:excludedir = /tmp,/temp,/cache
        recycle:repository = 


doing the same with 3.0.24 all is fine.

your help is welcome. 

best regards 
hans 

--
 


Firma & Rechtsform: Österreichische Agentur für Gesundheit und Ernährungssicherheit GmbH  Sitz: Spargelfeldstraße 191, 1226 Wien  Firmenbuchnummer: FN 223056z   Firmenbuchgericht: Handelsgericht Wien   


More information about the samba mailing list