samba - May 2006 - NT4 user can't change password during logon (but XP can)

When a password must be changed during logon (pdbedit <user>
--pwd-must-change-time=0) then this is impossible on NT4 SP6a
machines; we always get this error:

"Unable to change the password on this account (C00000BE). Please
consult your system administrator.".

At that time we get these messages in log.smbd:
<<<< log.smbd <<<<
[Tue May  9 10:46:17 2006
, 0] lib/debug.c:reopen_logs(597)
  Unable to open new log file /usr/local/samba/var/log.rsl2: Permission denied
[Tue May  9 10:46:17 2006
, 0] libsmb/ntlmssp_sign.c:ntlmssp_check_packet(217)
  NTLMSSP NTLM1 packet check failed due to invalid signature!
[Tue May  9 10:46:17 2006
, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(577)
  process_request_pdu: failed to do auth processing.
[Tue May  9 10:46:17 2006
, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(578)
  process_request_pdu: error was
NT_STATUS_ACCESS_DENIED.
>>>> log.smbd >>>>
However, onced logged on to NT4, the password often can be changed
However in XP, the password can always be changed, even during logon.

Server = HP-UX 11.00 running Samba 3.0.21c PDC.
Backend = OpenLDAP but I also tried using tdbsam and the problem is the same.

On Tue, May 09, 2006 at 11:07:33AM +0200, Roel Slegers
wrote:
> "Unable to change the password on this account (C00000BE). Please
> consult your system administrator.".
That's a known problem that is fixed in the current 3_0
code. Is it possible that you test 3.0.23pre1 to make sure
we actually fixed it for your scenario?

Thanks,

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20060510/b602f50c/attachment.bin