[Samba] Old samba password is valid after setting the new one.

[Andrew Bartlett]

On Fri, 2019-10-25 at 22:39 +0200, Dipl.-Ing. Péter Varkoly via samba
wrote:
> Hi,
> 
> I've detected a very strange behavior on samba 4.8.9 and 4.10.6.
> After setting a new password for a user with samba-tool the old
> password remains valid. The user can use both passwords.

> Is it a bug or a feature?

Feature.  Designed to allow logins to still work that have the old
password cached, otherwise network shares can't reconnect. 

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba