[Samba] Password question

[Dan Egli]

On 12/3/2020 4:10 AM, Rowland penny via samba wrote:
> On 03/12/2020 10:32, Dan Egli via samba wrote:
>> I was in the final stages of setting up my Samba AD DC when I 
>> realized I'd forgotten the password I assigned to the test user I 
>> setup. So I looked at samba-tool to figure out how to change it. And 
>> I see TWO password commands. I see samba-tool user password and user 
>> setpassword. The help messages says password is for the 
>> authentication password. Okay, so what's setpassword? And which would 
>> I use to test winbind authentication against the DC?  i.e. login to 
>> box2, box2 polls winbind, winbind polls box1 (AD DC) which replies 
>> with a yes or no for successful login.
>>
>> Thanks!
>>
> 'samba-tool user password' requires the old password to allow changing 
> it. If a user runs the command, they will be prompted for their old 
> password and if they haven't provided the new password with 
> '--newpassword=NEWPASSWORD', they will be prompted for a new password 
> (twice)
>
> 'samba-tool user setpassword' allows root (or another admin user) to 
> set or reset another users password.
>
> You wouldn't use either to test a password, they both set the 
> password. However you are correct, you can test the password by trying 
> to log into a domain joined machine.
>
>
Got it. setpassword is for admin while password is for users to change their own password. Now I just need to lookup the winbind configuration for my other machine so that I can configure winbind properly for my testing.

Thanks!
-- 
Dan Egli
 From my Test Server