[Samba] Users cannot change their passwords

[Konstantin Boyandin]

On 25.09.2018 15:44, Rowland Penny via samba wrote:
> On Mon, 24 Sep 2018 21:22:06 GMT
> "Torin Woltjer" <torin.woltjer at granddial.com> wrote:
> 
>> Thanks for the quick reply, I believe I am using MIT based on log
>> file names; but is there a better way to tell? I'm not very
>> knowledgeable about the distinction between MIT and Heimdal regarding
>> KDC. Can you direct me to a resource that explains how to make the
>> switch as I am just using the  defaults in SUSE. Additionally, many
>> of the domains experiencing this bug were working fine; before
>> migrating them from Ubuntu 16.04. Is this because the bug was
>> introduced in a newer version that I am now using? Is the bug fixed
>> in a version newer than what I am using now?
>>
>> Thanks again, I appreciate the help.
>>
>> Torin Woltjer
>>  
>> Grand Dial Communications - A ZK Tech Inc. Company
>>  
>> 616.776.1066 ext. 2006
>> www.granddial.com
> 
> Took some finding, but I am now very sure that the opensuse Samba AD DC
> uses MIT instead of Heimdal, so this makes it inadvisable to use in
> production. There are just too many problems to make it usable, the
> password problem being one of them.
> 
> I am sorry, but, as far as I am aware, there is no RPM based distro
> that has production ready Samba packages, I also have a feeling that
> the Ubuntu packages now use MIT, so this really just leaves Debian etc.

I am using Ubuntu 18.04. Both MIT and Heimdal strains of Kerberos are
available from standard repositories and can be installed
simultaneously, FWIK.

Sincerely,
Konstantin