samba - Sep 2006 - unable to change passwd from win XP

Hi list,

I have set up two Samba PDC networks for work with win XP clients.  Each
network is small, about 15 clients and three printers.  Each uses a
different distro (don't ask)--one is mandriva 2006 the other is debian
sarge.  Both have all updates.  Both have working wins and dns on Linux.

Mostly things work well, but I am unable to change passwords from the XP
clients.  The client will hang, then give this message:  
*you do not have permission to change your password*

I have googled; what I saw pertained to changes in XP that broke Samba
and were fixed at v3.04.  I am using samba-server-3.0.20-3.1.20060mdk on
mandriva and samba 3.0.14a-3sarge on debian.

Here is my smb.conf for debian:

foo@server1:~$ head -n 50 /etc/samba/smb.conf
[global]
   workgroup = FOOBAR
   netbios name = SERVER1
   server string = lan file server


   passdb backend = tdbsam
   security = user
   username map = /etc/samba/smbusers
   name resolve order = dns wins bcast hosts
   domain logons = yes
   os level = 64
   preferred master = yes
   wins support = yes

   # Set CUPS for printing
   printcap name = CUPS
   printing = CUPS
   # use client drivers = yes

   # Default logon
   logon drive = Z:
   logon script = scripts/logon.bat
   logon path = \\%L\profile\%U


   # Useradd scripts
   add user script = /usr/sbin/useradd -m %u
   delete user script = /usr/sbin/userdel -r %u
   add group script = /usr/sbin/groupadd %g
   delete group script = /usr/sbin/groupdel %g
   add user to group script = /usr/sbin/usermod -G %g %u
   add machine script = /usr/sbin/useradd -s /bin/false/ -d /dev/null -g
machines %u
   idmap uid = 15000-20000
   idmap gid = 15000-20000


   # sync smb passwords with linux passwords
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *new*password* %n\n*Re-enter*new*password* %n\n
*Password*changed*
   passwd chat debug = yes

   # set the loglevel
   log level = 3

[homes]<snip>

here's a log.smbd excerpt 

[2006/09/22 00:04:59, 3] smbd/chgpasswd.c:chat_with_program(429)
  chat_with_program: Dochild for user steve (uid=0,gid=0) (as_root Yes)
[2006/09/22 00:05:01, 2] smbd/chgpasswd.c:expect(285)
  expect: Success
[2006/09/22 00:05:01, 3] smbd/chgpasswd.c:talktochild(316)
  Response 1 incorrect
[2006/09/22 00:05:01, 3] smbd/chgpasswd.c:chat_with_program(372)
  chat_with_program: Child failed to change password: steve

Thanks in advance for any advice.

Steve G

Steve,

On 9/22/06, Steve Glasser <steve@fpig.net> wrote:
> Hi list,
>
>   # sync smb passwords with linux passwords
>   unix password sync = yes
Ok, I have this line...
>   passwd program = /usr/bin/passwd %u
>   passwd chat = *new*password* %n\n*Re-enter*new*password* %n\n
> *Password*changed*
>   passwd chat debug = yes
I don't have this stuff though,
I DO have an additional line:

pam password change = yes

which works for me :)

Hope this helps,
-- 
Rory Vieira
rory dot vieira at gmail dot com