[Samba] Making Samba change the Unix Password (/etc/shadow)

Rubin Bennett rbennett at thatitguy.com
Tue Feb 5 00:07:42 GMT 2008


Ok, I assume that your system does have a pam auth subsystem?

What distro are you on, and may we see your smb.conf (you can omit the
share definitions)?

Rubin	
On Tue, 2008-02-05 at 05:26 +0530, Parag Kalra wrote:
> Yes I have restarted smb but still no fruits.
> 
> Also placing "passwd chat debug = yes" didn't generate any log
> in /var/log/samba/smd.log
> 
> Could anyone please explain the following:
> 
> [If you want to keep using passwd instead of PAM, could you write a
> wrapper/replacement for passwd that logs everything that happens?]
> 
> --
> Parag Kalra
> 
> On Feb 5, 2008 5:11 AM, Rubin Bennett <rbennett at thatitguy.com> wrote:
>         Did you restart samba (/etc/init.d/smb restart)?
>         
>         You need to at least do a reload (/etc/init.d/smb reload) for
>         config
>         file changes to be read.
>         
>         Rubin
>         
>         
>         On Tue, 2008-02-05 at 08:09 +0900, Michael Heydon wrote:
>         > Parag Kalra wrote:
>         > > Hi Rubin,
>         > >
>         > > I made the changes suggested by you but still its not
>         working.
>         > >
>         > > --
>         > > Parag Kalra
>         > >
>         > > On Feb 5, 2008 3:29 AM, Rubin Bennett
>         <rbennett at thatitguy.com> wrote:
>         > >
>         > >
>         > >> On Tue, 2008-02-05 at 02:26 +0530, Parag Kalra wrote:
>         > >>
>         > >>> Hello all,
>         > >>>
>         > >>> I am trying to change the linux login password through
>         the smbpasswd
>         > >>> command by placing following  parameters in smb.conf
>         file:
>         > >>>
>         > >>> unix password sync = Yes
>         > >>> passwd program = /usr/bin/passwd %u
>         > >>> passwd chat = "*enter old password*" %o\\n "*Enter NEW
>         password*"
>         > >>> %n\\n "*reenter New passwd*" %n\\n "*password changed*"
>         > >>>
>         > >>>
>         > >> testparm is your friend :)  It should complain about the
>         passwd command,
>         > >> and for good reason; it shouldn't be there.  Use:
>         > >> pam password change = yes
>         > >> instead, and get rid of the passwd program and passwd
>         chat lines.
>         > >>
>         > >>
>         > PAM is far from universal, there are plenty of OSes and
>         distros that do
>         > not include PAM. The man page doesn't say anything about
>         passwd program
>         > being depreciated, why would testparm complain about it?
>         >
>         > Are you getting anything in the logs when trying to reset
>         the password?
>         > Have you tried enabling passwd chat debug (you may have to
>         up your log
>         > level as well)? If you want to keep using passwd instead of
>         PAM, could
>         > you write a wrapper/replacement for passwd that logs
>         everything that
>         > happens?
>         > >> HTH,
>         > >> Rubin
>         > >>
>         > >>
>         > >
>         >
>         > *Michael Heydon - IT Administrator *
>         > michaelh at jaswin.com.au <mailto:michaelh at jaswin.com.au>
>         
>         --
>         
>         Rubin Bennett
>         RB Technologies
>         http://thatitguy.com
>         rbennett at thatitguy.com
>         (802)223-4448
>         
>         "They that can give up essential liberty to obtain a little
>         temporary security deserve neither liberty nor safety"
>          --Benjamin Franklin, Historical Review of Pennsylvania, 1759
>         
>         
>         
> 
> 
> 
> -- 
> Love,
> PARAG . A . KALRA
> 
> Good judgment comes from experience, and experience comes from bad
> judgment
> 
> http://discoverlinux.blogspot.com
> Debian Linux! A Dawn of New Era!
-- 
Rubin Bennett
RB Technologies
http://thatitguy.com
rbennett at thatitguy.com
(802)223-4448

"They that can give up essential liberty to obtain a little
temporary security deserve neither liberty nor safety"
  --Benjamin Franklin, Historical Review of Pennsylvania, 1759




More information about the samba mailing list