Andreas Hartmann
2003-Feb-19 15:21 UTC
[Samba] Changing password from Windows 2K / XP client on samba server with different passwords on client and server
Hello all, I've got a problem when I try to change a password from W2K or XP on a samba 2.2.5 - server. That's the situation: The user "hugo" is logged on locally or in a domain "first" with his password "secret". The user has shares on a secound domain, the "samba" domain, too. The user can do a net use M: \\samba\share to get the share on the samba domain. This works fine, no matter if the passwords for hugo are the same or not in the two domains or locally, because Windows asks for the correct password if the password sent with the net use command is wrong. Totally different if hugo tries to change the password on the samba domain. This does only work, if the existing passwords on the client or first domain and on the samba domain are the same. If the user wants to change the password on the samba domain after one successfull password change again (-> the passwords on the client and on the samba domain are different now), the samba server says, that the password it got would be wrong - but the user has provided the correct password and username hugo for the samba domain in the password change dialog in windows. I would be very glad to get some information to resolve this problem :-). Regards, Andreas Hartmann ------------------------------------------------------------------------ smb.conf [global] workgroup = Workgroup server string = Samba Server on samba encrypt passwords = Yes smb passwd file = /etc/samba/smbpasswd min passwd length = 8 obey pam restrictions = Yes pam password change = Yes security = user passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* username map = /etc/samba/smbusers unix password sync = No log level = 2 log file = /var/log/samba/%m.log max log size = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 character set = ISO8859-1 client code page = 850 domain admin group = root xca1015 domain logons = Yes os level = 64 preferred master = True domain master = True dns proxy = Yes wins support = Yes create mask = 0774 directory mask = 0775 inherit acls = Yes map system = Yes map hidden = Yes csc policy = disable The logfile says: [2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575) pass_check_smb failed - invalid password for user [hugo] [2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(972) NT Password did not match for user 'hugo'! [2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(982) Defaulting to Lanman password for hugo [2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575) pass_check_smb failed - invalid password for user [hugo] [2003/02/19 16:19:28, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'hugo': authentication failed [2003/02/19 16:19:28, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575) pass_check_smb failed - invalid password for user [hugo] [2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(972) NT Password did not match for user 'hugo'! [2003/02/19 16:19:28, 2] smbd/reply.c:reply_sesssetup_and_X(982) Defaulting to Lanman password for hugo [2003/02/19 16:19:28, 2] smbd/password.c:pass_check_smb(575) pass_check_smb failed - invalid password for user [hugo] [2003/02/19 16:19:28, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'hugo': authentication failed [2003/02/19 16:19:28, 2] smbd/server.c:exit_server(461) Closing connections [2003/02/19 16:19:28, 0] lib/util_sec.c:assert_gid(114) Failed to set gid privileges to (0,65533) now set to (0,-1) uid=(0,65534) [2003/02/19 16:19:28, 0] lib/util.c:smb_panic(1094) PANIC: failed to set gid [2003/02/19 16:19:29, 0] lib/util_sec.c:assert_gid(114) Failed to set gid privileges to (0,65533) now set to (0,-1) uid=(0,65534) [2003/02/19 16:19:29, 0] lib/util.c:smb_panic(1094) PANIC: failed to set gid