[Samba] Change Password from Windows Native Interface

Andrew Bartlett abartlet at samba.org
Sun Dec 4 18:50:23 UTC 2016


On Sun, 2016-12-04 at 11:43 +0000, Rowland Penny via samba wrote:
> On Sun, 4 Dec 2016 12:11:17 +0100
> Marc Muehlfeld via samba <samba at lists.samba.org> wrote:
> 
> > 
> > Hi Scott,
> > 
> > Am 02.12.2016 um 06:55 schrieb Scott Mattan via samba:
> > > 
> > > I am currently trying to get a Samba 4.5.1 environment set up for
> > > testing and I am unable to get samba to request a new password
> > > from
> > > a windows user.  The error that I get, is in Japanese, so I don't
> > > have the exact translation, however it is along the lines of...
> > > 
> > > Your user password must be changed before logging in for the
> > > first
> > > time.
> > > 
> > > I am currently using SambaDC (although my computer is not
> > > connected
> > > to the samba domain).
> > 
> > As far as I know, Windows only prompts for password changes when a
> > domain user logs into a domain workstation. If a domain user just
> > access a share from a none-domain-member machine only an error is
> > shown and access is denied.

This is correct.  There isn't a way to forward on the password changes,
nor clearly know which DC the file server was using, so no password
change prompt can be offered.

> > 
> > 
> > Am 03.12.2016 um 18:53 schrieb Rowland Penny via samba:
> > > 
> > > You also seem to have built the deprecated 'ntvfs' filesystem.
> > 
> > Yes, but he's not using it:
> > > 
> > > server services = s3fs,...
> > 
> > If he would, Samba 4.5 would fail to start:
> > https://wiki.samba.org/index.php/Updating_Samba#The_ntvfs_File_Serv
> > er_Back_End_Has_Been_Disabled
> > 
> > 
> 
> Yes, I noticed, but everything the OP posted seemed to be just wrong.
> He appears to be running Samba as an AD DC, but isn't joining
> anything
> to it, he has built the 'ntvfs' filesystem but isn't using it.

That's just because he built with --enable-selftest.  That turns on the
ntvfs file server as the selftest relies on it.

> Perhaps it might help if the OP was to describe just what they are
> doing and why.

Always a good thing to start with.

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba




More information about the samba mailing list