[Samba] Resetting a User Password From S3 or S4 Member Server

[Andrew Bartlett]

On Tue, 2013-02-05 at 18:45 -0500, Thomas Simmons wrote:
> Is it possible to reset a users password from a member server without
> knowing the current password? I was able to do this with S3, though it was
> not truly a "member" server - I configured the server in question to have
> direct access to OpenLDAP in smb.conf. 

In this case it would be a co-DC. 

> I have a member server joined to my
> S4 domain and a user can change his or her own password via passwd, kpasswd
> or smbpasswd, however I would like to have the ability to reset a user's
> forgotten password from this server myself.

Tools like 'samba-tool' can take -H on commands like 'samba-tool user
setpassword -H ldap://foo'.

There are also many other tools that can do this over many different
protocols, including kpasswd, LDAP and SAMR.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org