[Samba] Making Samba change the Unix Password (/etc/shadow)

[Adam Williams]

this is my passwd chat for RHEL:

passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*


Parag Kalra wrote:
> I am using RHEL 4 U5.
>
> The enteries under concern are:
>
> unix password sync = Yes
>
> passwd program = /usr/bin/passwd %u
>
> passwd chat = "*enter old password*" %o\\n "*Enter NEW password*" %n\\n
> "*reenter New passwd*" %n\\n "*password changed*"
>
> username map = /etc/samba/smbusers
>
> Also to view the entire file please see the attachment.
> --
> Parag Kalra
>
> On Feb 5, 2008 5:37 AM, Rubin Bennett <rbennett at thatitguy.com> wrote:
>
>   
>> Ok, I assume that your system does have a pam auth subsystem?
>>
>> What distro are you on, and may we see your smb.conf (you can omit the
>> share definitions)?
>>
>> Rubin
>> On Tue, 2008-02-05 at 05:26 +0530, Parag Kalra wrote:
>>     
>>> Yes I have restarted smb but still no fruits.
>>>
>>> Also placing "passwd chat debug = yes" didn't generate any log
>>> in /var/log/samba/smd.log
>>>
>>> Could anyone please explain the following:
>>>
>>> [If you want to keep using passwd instead of PAM, could you write a
>>> wrapper/replacement for passwd that logs everything that happens?]
>>>
>>> --
>>> Parag Kalra
>>>
>>> On Feb 5, 2008 5:11 AM, Rubin Bennett <rbennett at thatitguy.com> wrote:
>>>         Did you restart samba (/etc/init.d/smb restart)?
>>>
>>>         You need to at least do a reload (/etc/init.d/smb reload) for
>>>         config
>>>         file changes to be read.
>>>
>>>         Rubin
>>>
>>>
>>>         On Tue, 2008-02-05 at 08:09 +0900, Michael Heydon wrote:
>>>         > Parag Kalra wrote:
>>>         > > Hi Rubin,
>>>         > >
>>>         > > I made the changes suggested by you but still its not
>>>         working.
>>>         > >
>>>         > > --
>>>         > > Parag Kalra
>>>         > >
>>>         > > On Feb 5, 2008 3:29 AM, Rubin Bennett
>>>         <rbennett at thatitguy.com> wrote:
>>>         > >
>>>         > >
>>>         > >> On Tue, 2008-02-05 at 02:26 +0530, Parag Kalra wrote:
>>>         > >>
>>>         > >>> Hello all,
>>>         > >>>
>>>         > >>> I am trying to change the linux login password through
>>>         the smbpasswd
>>>         > >>> command by placing following  parameters in smb.conf
>>>         file:
>>>         > >>>
>>>         > >>> unix password sync = Yes
>>>         > >>> passwd program = /usr/bin/passwd %u
>>>         > >>> passwd chat = "*enter old password*" %o\\n "*Enter NEW
>>>         password*"
>>>         > >>> %n\\n "*reenter New passwd*" %n\\n "*password changed*"
>>>         > >>>
>>>         > >>>
>>>         > >> testparm is your friend :)  It should complain about the
>>>         passwd command,
>>>         > >> and for good reason; it shouldn't be there.  Use:
>>>         > >> pam password change = yes
>>>         > >> instead, and get rid of the passwd program and passwd
>>>         chat lines.
>>>         > >>
>>>         > >>
>>>         > PAM is far from universal, there are plenty of OSes and
>>>         distros that do
>>>         > not include PAM. The man page doesn't say anything about
>>>         passwd program
>>>         > being depreciated, why would testparm complain about it?
>>>         >
>>>         > Are you getting anything in the logs when trying to reset
>>>         the password?
>>>         > Have you tried enabling passwd chat debug (you may have to
>>>         up your log
>>>         > level as well)? If you want to keep using passwd instead of
>>>         PAM, could
>>>         > you write a wrapper/replacement for passwd that logs
>>>         everything that
>>>         > happens?
>>>         > >> HTH,
>>>         > >> Rubin
>>>         > >>
>>>         > >>
>>>         > >
>>>         >
>>>         > *Michael Heydon - IT Administrator *
>>>         > michaelh at jaswin.com.au <mailto:michaelh at jaswin.com.au>
>>>
>>>         --
>>>
>>>         Rubin Bennett
>>>         RB Technologies
>>>         http://thatitguy.com
>>>         rbennett at thatitguy.com
>>>         (802)223-4448
>>>
>>>         "They that can give up essential liberty to obtain a little
>>>         temporary security deserve neither liberty nor safety"
>>>          --Benjamin Franklin, Historical Review of Pennsylvania, 1759
>>>
>>>
>>>
>>>
>>>
>>>
>>> --
>>> Love,
>>> PARAG . A . KALRA
>>>
>>> Good judgment comes from experience, and experience comes from bad
>>> judgment
>>>
>>> http://discoverlinux.blogspot.com
>>> Debian Linux! A Dawn of New Era!
>>>       
>> --
>> Rubin Bennett
>> RB Technologies
>> http://thatitguy.com
>> rbennett at thatitguy.com
>> (802)223-4448
>>
>> "They that can give up essential liberty to obtain a little
>> temporary security deserve neither liberty nor safety"
>>  --Benjamin Franklin, Historical Review of Pennsylvania, 1759
>>
>>
>>
>>     
>
>
>