samba - Aug 2003 - Fw: Forcing password changes using SAMBA as PDC

Hi, I did as suggested, and still have the same problem.

I am still able to login to samba with another users password that does not
require password changes. This seems to me that the problem is related to
PAM password changing. I have tried change the various PAM options in the
smb.conf file, but cannot get it to work. Depending on the options, it
either asks for a password or not. When it asks for the password, I get the
cannot find the domain error on the client and the PAM ERROR 12 on the
syslog.

Regards
Enrico
----- Original Message ----- 
From: "Andrew Bartlett" <abartlet@samba.org>
To: "Enrico Payne" <enricop@pharma.co.za>
Cc: <samba@lists.samba.org>; "John H Terpstra"
<jht@samba.org>; "Andreas"
<andreas@conectiva.com.br>; "Andrew Bartlett"
<abartlet@samba.org>
Sent: Thursday, August 28, 2003 4:29 PM
Subject: Re: [Samba] Forcing password changes using SAMBA as PDC

> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-
___________________________________________
This e-mail has been scanned for viruses.
Pharma Natura will not be held responsible
for the loss of data or any other loss
caused by the use of the information
contained in this e-mail.
-------------- next part --------------
On Thu, 2003-08-28 at 18:08, Enrico Payne wrote:
> Hello
> 
> > The issue of why PAM is now rejecting the account is up to PAM - can
you
> > log in with SSH on this account now?  (With and without an SSH key).
> 
> I can ssh to the machine from the windows client using the account.
Then make sure your PAM configuration for SSH is the same as for Samba.
> > You should use 'pam password change' when using PAM based
systems, it is
> > much more reliable than the 'talk to /bin/passwd' method, and
will give
> > you better error reports.
> 
> Where do I make this change and how/what do I change? My knowlege of PAM is
> less than zero.
This is an smb.conf option - but if you are not confident with PAM, then
I suggest you avoid the issue of PAM restrictions and password sync.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net

Hi, I did some further testing with this, and have discovered that the
problem exists with WinXP clients. Win 9x clients seem to work with okay.
How do I log this as a possible bug?

Regards
Enrico
----- Original Message ----- 
From: "Enrico Payne" <enricop@pharma.co.za>
To: ""Andrew Bartlett"" <abartlet@samba.org>
Cc: <samba@lists.samba.org>; ""John H Terpstra""
<jht@samba.org>;
""Andreas"" <andreas@conectiva.com.br>
Sent: Friday, August 29, 2003 12:34 PM
Subject: Fw: [Samba] Forcing password changes using SAMBA as PDC

> Hi, I did as suggested, and still have the same problem.
>
> I am still able to login to samba with another users password that does
not
> require password changes. This seems to me that the problem is related to
> PAM password changing. I have tried change the various PAM options in the
> smb.conf file, but cannot get it to work. Depending on the options, it
> either asks for a password or not. When it asks for the password, I get
the
> cannot find the domain error on the client and the PAM ERROR 12 on the
> syslog.
>
> Regards
> Enrico
> ----- Original Message ----- 
> From: "Andrew Bartlett" <abartlet@samba.org>
> To: "Enrico Payne" <enricop@pharma.co.za>
> Cc: <samba@lists.samba.org>; "John H Terpstra"
<jht@samba.org>; "Andreas"
> <andreas@conectiva.com.br>; "Andrew Bartlett"
<abartlet@samba.org>
> Sent: Thursday, August 28, 2003 4:29 PM
> Subject: Re: [Samba] Forcing password changes using SAMBA as PDC
>
>
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>
> -
> ___________________________________________
> This e-mail has been scanned for viruses.
> Pharma Natura will not be held responsible
> for the loss of data or any other loss
> caused by the use of the information
> contained in this e-mail.
>

----------------------------------------------------------------------------
----

> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-
___________________________________________
This e-mail has been scanned for viruses.
Pharma Natura will not be held responsible
for the loss of data or any other loss
caused by the use of the information
contained in this e-mail.