[Samba] Changing passwords from Windows

[Joe Tseng]

I'm still getting a insufficient privileges message.  My attributes in slapd.conf are below:
 
access to dn.regex=".*,dc=at,dc=home" attrs=userPassword,sambaNTPassword,sambaLMPassword
 by dn="cn=root,dc=at,dc=home" write
 by self write
 by * auth
access to dn.regex=".*,dc=at,dc=home" attrs=mail
 by dn="cn=root,dc=at,dc=home" write
 by self write
 by * read
access to dn.regex=".*,ou=People,dc=at,dc=home"
 by * read
access to dn.regex=".*,dc=at,dc=home"
 by self write
 by * read
 

----------------------------------------
> Date: Fri, 28 Jan 2011 00:55:19 +0900
> Subject: Re: [Samba] Changing passwords from Windows
> From: monyo at monyo.com
> To: joe_tseng at hotmail.com
> CC: samba at lists.samba.org
>
> 2011/1/26 Joe Tseng :
> >
> > Is it possible for a user to change his/her password from Windows? I tried it
> > out last night as a test user against my PDC and it only changed for Samba; I
> > was still able to log into the PDC via SSH using the previous password. (I
> > changed it for the test user as root and it took for both SSH and Windows.)
>
> Set "ldap password sync = yes" in LDAP environment or set "unix
> password sync = yes"
> and "pam password change = yes" in normal environment with PAM enabled.
>
> > I tried to use smbldap-passwd as the test user, but I got a message back saying
> > I had insufficient privileges:
>
> Have you set "by self write" to both sambaLMPassword and sambaNTPassword?
>
> ---
> TAKAHASHI Motonobu