[Samba] Error when changing domain password in Windows XP

[Torkil Svensgaard]

Hi list

I'm have a samba (2:3.5.4~dfsg-1ubuntu8.4) domain with LDAP backend and 
I'm getting the following error when I try to change my domain password 
via Windows XP:

"The User name or old password is incorrect. Letters in passwords must 
be typed using the correct case".

The password is typed correctly and it does get changed in LDAP though.

This snippet from the log may be the culprit:

[2011/05/26 12:22:14.392666,  5] lib/smbldap.c:1556(smbldap_modify)
   smbldap_modify: dn => [uid=torkil,ou=Users,dc=drcmr,dc=local]
[2011/05/26 12:22:14.392990, 10] lib/smbldap.c:1576(smbldap_modify)
   Failed to modify dn: uid=torkil,ou=Users,dc=drcmr,dc=local, error: 16 
(No such attribute) (modify/delete: sambaNTPassword: no such value)
[2011/05/26 12:22:14.393027,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
   pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 1
[2011/05/26 12:22:14.393046,  5] 
rpc_server/srv_samr_nt.c:1954(_samr_ChangePasswordUser2)
   _samr_ChangePasswordUser2: 1954
[2011/05/26 12:22:14.393059,  1] 
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
        samr_ChangePasswordUser2: struct samr_ChangePasswordUser2
           out: struct samr_ChangePasswordUser2
               result                   : NT_STATUS_UNSUCCESSFUL

The attribute sambaNTPassword is present on the object, so that makes no 
sense?

I'm also seeing this error:

[2011/05/26 12:22:15.512074,  0] 
../libcli/auth/smbencrypt.c:589(decode_pw_buffer)
   decode_pw_buffer: incorrect password length (1024268875).
[2011/05/26 12:22:15.512087,  0] 
../libcli/auth/smbencrypt.c:590(decode_pw_buffer)
   decode_pw_buffer: check that 'encrypt passwords = yes'
[2011/05/26 12:22:15.512100,  5] 
rpc_server/srv_samr_nt.c:1954(_samr_ChangePasswordUser2)
   _samr_ChangePasswordUser2: 1954
[2011/05/26 12:22:15.512111,  1] 
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
        samr_ChangePasswordUser2: struct samr_ChangePasswordUser2
           out: struct samr_ChangePasswordUser2
               result                   : NT_STATUS_WRONG_PASSWORD

Any suggestions? I found this problem when I installed pam_passwdqc, 
which seem to work.

Thanks,

Torkil