Brandon Turner
2004-Apr-18 19:09 UTC
[Samba] You do not have permission to change your password
We recently migrated from WindowsNT to Samba 3.0.2a. After about two months, we have started to notice a weird problem. As user's passwords expire, they are prompted to change them. When they attempt to do so from Windows, they get a message saying "You do not have permission to change your password". However, the password IS changed. Both the Samba and LDAP Linux passwords are changed correctly, as well as the samba attributes (such as sambaPasswordLastSet, etc.) Sometimes we notice the following entry in our Samba logs: [2004/04/17 18:13:26, 0] smbd/chgpasswd.c:check_oem_password(832) check_oem_password: incorrect password length (-800397408). However sometimes this message does not appear. When we first installed Samba, we forced users to change their passwords from Windows and this worked fine. However, now 2 months later as their passwords are beginning to expire, this error is occurring for ALL users. The password is ALWAYS changed however, so I am totally lost as to what is going on. We have not changed any settings (that we know of) since when password changing was working and when it stopped. I've seen a lot of posts in the past about the error message we are receiving, however nothing substantial. The password DOES change, so if the packet is being decrypted wrong (the common error of several posts) then how does Samba know what the new password is. If you have any idea what is going on, please help. Brandon Turner MSC Computer Operations Texas A&M University
Brandon Turner
2004-Apr-22 21:14 UTC
[Samba] You do not have permission to change your password
Just an update. After reading others posts, I uninstalled Microsoft Cumulative Update MS04-012 (KB828741). Sure enough this fixed the problem. Hope Samba folks can correct this in Samba 3.0.3 so we don't have to uninstall this update on all computers. Brandon -----Original Message----- From: samba-bounces+samba=email.msc.tamu.edu@lists.samba.org [mailto:samba-bounces+samba=email.msc.tamu.edu@lists.samba.org] On Behalf Of Brandon Turner Sent: Sunday, April 18, 2004 2:09 PM To: samba@lists.samba.org Subject: [Samba] You do not have permission to change your password We recently migrated from WindowsNT to Samba 3.0.2a. After about two months, we have started to notice a weird problem. As user's passwords expire, they are prompted to change them. When they attempt to do so from Windows, they get a message saying "You do not have permission to change your password". However, the password IS changed. Both the Samba and LDAP Linux passwords are changed correctly, as well as the samba attributes (such as sambaPasswordLastSet, etc.) Sometimes we notice the following entry in our Samba logs: [2004/04/17 18:13:26, 0] smbd/chgpasswd.c:check_oem_password(832) check_oem_password: incorrect password length (-800397408). However sometimes this message does not appear. When we first installed Samba, we forced users to change their passwords from Windows and this worked fine. However, now 2 months later as their passwords are beginning to expire, this error is occurring for ALL users. The password is ALWAYS changed however, so I am totally lost as to what is going on. We have not changed any settings (that we know of) since when password changing was working and when it stopped. I've seen a lot of posts in the past about the error message we are receiving, however nothing substantial. The password DOES change, so if the packet is being decrypted wrong (the common error of several posts) then how does Samba know what the new password is. If you have any idea what is going on, please help. Brandon Turner MSC Computer Operations Texas A&M University -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Brandon Turner
2004-Apr-23 02:21 UTC
[Samba] You do not have permission to change your password
Nope, even with 3.0.3rc1 it still did the error. Passwords were changed correctly just like before. I did notice once that it would let me log in with either my original password, or the password I just changed to. This stopped after rebooting the Windows client, but still weird. I also get the "DOMAIN not available" message sometimes, or the "You don't have permission" others. Brandon -----Original Message----- From: Andrew Bartlett [mailto:abartlet@samba.org] Sent: Thursday, April 22, 2004 6:35 PM To: Brandon Turner Cc: samba@lists.samba.org Subject: RE: [Samba] You do not have permission to change your password On Fri, 2004-04-23 at 07:14, Brandon Turner wrote:> Just an update. After reading others posts, I uninstalled Microsoft > Cumulative Update MS04-012 (KB828741). Sure enough this fixed the > problem. Hope Samba folks can correct this in Samba 3.0.3 so we don't > have to uninstall this update on all computers.Can you try 3.0.3rc1? I made changes to ensure we do not use the LM password during the change, which might solve this issue. Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net