[Samba] Strange NT_STATUS_PASSWORD errors after upgrade to 3.0.26a
Tomasz Chmielewski
mangoo at wpkg.org
Wed Mar 5 10:08:45 GMT 2008
> I just upgraded one of our samba BDC's (with LDAP back end on
> solaris 10) from 3.0.23c to
> 3.0.26a and can no longer mount shares.
>
> The error message I'm seeing in the samba logs is
>
> [2007/11/15 14:15:26, 1] auth/auth_sam.c:sam_account_ok(172)
> sam_account_ok: Account for user 'dbb' password must change!.
> [2007/11/15 14:15:26, 3] auth/auth_winbind.c:check_winbind_security(80)
> check_winbind_security: Not using winbind, requested domain
> [CLASSROOM] was for this SAM.
> [2007/11/15 14:15:26, 2] auth/auth.c:check_ntlm_password(319)
> check_ntlm_password: Authentication for user [dbb] -> [dbb] FAILED
> with error NT_STATUS_PASSWORD_MUST_CHANGE
> [2007/11/15 14:15:26, 3] smbd/error.c:error_packet_set(106)
> error packet at smbd/sesssetup.c(1489) cmd=115 (SMBsesssetupX)
> NT_STATUS_PASSWORD_MUST_CHANGE
Hi,
Have there been any updates on this?
I have the same issue - after upgrading to the newest Samba, new users
who have "sambaPwdMustChange" set (to an older date) can no longer log in.
Whenever they want to log in, they are asked to change the password.
After changing the password, they are not allowed to log in anyway.
A workaround is to add a X flag to sambaAcctFlags - then, after changing
the password the user is able to log in, but is prompted to change the
password each time after he/she logs out and logs in again.
This issue is present in Samba releases newer than 3.0.24 (i.e.,
everything works fine in 3.0.24, the issue exists with 3.0.25 up to
current 3.0.28).
--
Tomasz Chmielewski
http://wpkg.org
More information about the samba
mailing list