[Samba] passwd change with 3.0.27a
Hans Mayer
hans.mayer at ages.at
Fri Nov 30 11:02:25 GMT 2007
dear all
we are using samba at serveral locations over years successfully. as we
have
some problems with acl's we tried to upgrade from 3.0.24 to 3.0.27a
as fare as we can see, all is working fine, except users cannot change the
password.
after some seconds a window appears:
"You do not have permission to change your password"
looking in the log seeing the following infos:
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chgpasswd(462)
chgpasswd: Password change (as_root=Yes) for user: mtest
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2007/11/30 11:23:55, 3] smbd/uid.c:push_conn_ctx(358)
push_conn_ctx(113) : conn_ctx_stack_ndx = 1
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(430)
chat_with_program: Dochild for user mtest (uid=0,gid=0) (as_root = Yes)
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:dochild(200)
could not read default terminal attributes on pty
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:pop_sec_ctx(356)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/11/30 11:23:55, 0] smbd/chgpasswd.c:chat_with_program(440)
chat_with_program: Error: dochild() returned 0
[2007/11/30 11:23:55, 2] smbd/chgpasswd.c:expect(285)
expect: Error 0
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:talktochild(316)
Response 1 incorrect
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(372)
chat_with_program: Child failed to change password: mtest
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(404)
chat_with_program: The process exited with status 1 while we were
waiting
here are the relevant configs in smb.conf
[global]
workgroup = TZB
netbios name = EG1
keepalive = 600
update encrypted = Yes
idmap backend = ldap:ldap://localhost:389
passdb backend = ldapsam:ldap://localhost:389
passwd program = /uni/bin/ldapsync.pl -o %u
passwd chat = New %n\n new %n\n *changed* \n
passwd chat timeout = 20
passwd chat debug = Yes
unix password sync = yes
hostname lookups = yes
log level = 3
log file = /var/adm/samba/%m.log
logon script = logon.cmd
logon path =
logon drive = F:
domain logons = Yes
allow trusted domains = yes
ldapsam:trusted = yes
oplock break wait time = 30
os level = 34
preferred master = Yes
domain master = Yes
local master = Yes
wins support = Yes
#wins server = 172.18.60.72
name resolve order = wins bcast
host msdfs = No
guest account = nobody
ldap suffix = dc=ages,dc=at
ldap machine suffix = ou=maschinen
ldap user suffix = ou=people
ldap group suffix = ou=group
ldap admin dn = "cn=manager,dc=ages,dc=at"
ldap ssl = no
deadtime = 20
enable privileges = Yes
admin users = root edvtest installpc barainst
vscan-clamav:config-file =
/usr/local/samba3024/lib/vscan-clamav.conf
printing = bsd
#Wert in Millisekunden-bei Bedarf bitte anpassen
ldap replication sleep = 1000
unix charset = CP850
display charset = ASCII
dos charset = CP850
socket options =
time server = yes
vfs objects = recycle vscan-clamav extd_audit
acl map full control = Yes
recycle:keeptree = Yes
recycle:touch = Yes
recycle:versions = yes
recycle:maxsize = 50000000
recycle:exclude = ~*,*TMP,*tmp,*temp,*.o,*.obj,~$*,*.~??
recycle:excludedir = /tmp,/temp,/cache
recycle:repository =
doing the same with 3.0.24 all is fine.
your help is welcome.
best regards
hans
--
Firma & Rechtsform: Österreichische Agentur für Gesundheit und Ernährungssicherheit GmbH Sitz: Spargelfeldstraße 191, 1226 Wien Firmenbuchnummer: FN 223056z Firmenbuchgericht: Handelsgericht Wien
More information about the samba
mailing list