samba - Aug 2006 - pam_winbind fails with "never expires" password

I'm helping a school district set up Samba for staff/student shares.  The 
PDC/BDCs are running NT4.   Samba is v 3.0.23a on Fedora Core 5 
boxes.  winbind is mapping the users.  Access to shares through Windows 
clients or smbclient works perfectly.

There is a desire to have some faculty access the server using, e.g., an 
ssh client (mostly for remote file access).  When I try to log in using an 
account that has an old password but with "password never expires"
set, I
get the message "Your password has expired" and I can't log in. 
If I reset
the password (and presumably reset the expiration date), I can log in with 
no problem.

So everything works except when an account with an old password tries to 
log in, even though "never expires" is set.  I've tried a number
of
alternatives in the pam and samba config files to no avail.

Any direction would be appreciated.  Thanks!

-- bill


Bill Greene
Rubicon Group Ltd
Oak Brook Illinois USA

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bill Greene wrote:
> So everything works except when an account with an old 
> password tries to log in, even though "never expires" is
> set.  I've tried a number of alternatives in the
> pam and samba config files to no avail.
It's our bug.  We're working on a fix.  The work around is
to set a long (but not infinite) expiry period.



cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE2mO0IR7qMdg1EfYRAuINAKCwVIy+wglT7kwoAqayW5xZnKF/iACfdGIP
n96NqFJVD3vjmpR/gNfHbbw=CF0j
-----END PGP SIGNATURE-----