[Samba] NT_STATUS_PASSWORD_MUST_CHANGE looping

[James Mills]

Hi,

We have an Ubuntu 10.10 server running Samba 3.5.4 with OpenLDAP 2.4.23
and we have a small problem where every time a user logs onto a workstation
they are asked to change their password. Once they enter a new password
and confirm it, it asks them again and again and again.

The only way to fix this (which isn't a fix) is to use the smbldap-passwd
tool to reset their password. But then it happens again the next day.

Here is a sample LDAP entry for my user:

32 uid=JMills,ou=Users,dc=neubau,dc=com,dc=au
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
cn: James Mills
sn: Mills
givenName: James
uid: JMills
uidNumber: 1066
gidNumber: 513
homeDirectory: /export/data/home/JMills
loginShell: /bin/bash
gecos: System User
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
displayName: James Mills
sambaSID: S-1-5-21-3626674478-1586681162-2521339854-3132
sambaPrimaryGroupSID: S-1-5-21-3626674478-1586681162-2521339854-513
sambaHomeDrive: H:
sambaNTPassword: x
sambaPwdMustChange: 1290993110
shadowLastChange: 14942
shadowMax: 0
sambaHomePath: \\ALPHA\JMills
sambaLogonScript: \\ALPHA\netlogon\netlogon.bat
sambaProfilePath: \\ALPHA\profiles\JMills
sambaPwdCanChange: 1
sambaPasswordHistory:
0000000000000000000000000000000000000000000000000000000000000000
sambaPwdLastSet: 1291111590
sambaAcctFlags: [U          ]

I'm not quite sure what's going on or how we've misconfigured this
but any help solving this would be very appreciated.

Here is out smb.conf pasted as well:

http://paste.pocoo.org/show/298311/

Thank you,

cheers
James

-- 
-- James Mills
--
-- "Problems are solved by method"