samba - Jan 2015 - Windows users can't change password 4.1.6

Hello Marc,

W dniu 2015-01-22 o 20:17, Marc Muehlfeld pisze:
> Hello Micha?,
>
> Am 22.01.2015 um 07:13 schrieb Micha? P??rolniczak:
>> When GPO tells you to change password after 30days, or you want to
>> change it; ...
>
> At first: You can't define password policies via GPO, because they have
> to be interpreted by the domain controller(s) and Samba doesn't know
> anything about GPOs and what to do with them. Set password stuff domain
> wide via 'samba-tool domain passwordsettings'.
>
>
https://wiki.samba.org/index.php/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F
>
I understand. I change local GPO on each station so it bypass the GPO 
which dont work like you said. Thats why it force users to change 
password after 30 days.
>
> To find out, if there's another problem, we have to know more about the
> situation: Does the password change says that it was successfully? What
> do the logs say about the password change and when the user tries to
> logon with the new password? And is the password usable, if you change
> it via samba-tool/ADUC?
>
>
> Regards,
> Marc
>
When changing password via Windows Logon it doesn't say it change it, it 
say that new password that I entered is not valid with password politic 
settings, and wasn't change.
But if you try to change the old password once more (even with the same 
password you enter right before) it say that the user name or password 
is invalid.
And you can not log anymore using old or new password.

Which log should I lookup when changing password? any specific command 
to use it in debug mode? Im using the ubuntu repo samba 4.1.6

Hello Micha?,

Am 27.01.2015 um 07:08 schrieb Micha? P??rolniczak:
> When changing password via Windows Logon it doesn't say it change it,
it
> say that new password that I entered is not valid with password politic
> settings, and wasn't change.
Does it met the requirements?
https://technet.microsoft.com/en-us/library/cc786468%28v=ws.10%29.aspx

See 'samba-tool domain passwordsettings --help' if you wanna change
domain wide password settings.


> But if you try to change the old password once more (even with the same
> password you enter right before) it say that the user name or password
> is invalid.
> And you can not log anymore using old or new password.
That's strange. Never heard that. Let me try to reprocuce this.
- Which Windows OS do you try to do the PW change on?
- Give an example password that isn't accepted and after that
  you get into this situation.


Regards,
Marc

This happens to me as well. Over several different versions of Samba. 
It's a minor nuisance on my end. Basically the following

  * User is prompted to change password
  * User types old password along with new password twice.
  * User is prompted with the error message 'unable to change password.
    doesn't meet the complexity blah blah blah'.
  * It will then prompt for old password along with new password.

The password change actually succeeds. That's why the user receives a 
message about the old password not being correct. I have the user 
restart their workstation and have them log in with the password they 
just created. Sometimes they will need to choose other user and type 
their username and password and not use the last logged on user prompt.



On 1/27/2015 12:42 PM, Marc Muehlfeld wrote:
> Hello Micha?,
>
> Am 27.01.2015 um 07:08 schrieb Micha? P??rolniczak:
>> When changing password via Windows Logon it doesn't say it change
it, it
>> say that new password that I entered is not valid with password politic
>> settings, and wasn't change.
> Does it met the requirements?
> https://technet.microsoft.com/en-us/library/cc786468%28v=ws.10%29.aspx
>
> See 'samba-tool domain passwordsettings --help' if you wanna change
> domain wide password settings.
>
>
>
>> But if you try to change the old password once more (even with the same
>> password you enter right before) it say that the user name or password
>> is invalid.
>> And you can not log anymore using old or new password.
> That's strange. Never heard that. Let me try to reprocuce this.
> - Which Windows OS do you try to do the PW change on?
> - Give an example password that isn't accepted and after that
>    you get into this situation.
>
>
> Regards,
> Marc
-- 
-James

W dniu 2015-01-27 o 18:42, Marc Muehlfeld pisze:
> Hello Micha?,
>
> Am 27.01.2015 um 07:08 schrieb Micha? P??rolniczak:
>> When changing password via Windows Logon it doesn't say it change
it, it
>> say that new password that I entered is not valid with password politic
>> settings, and wasn't change.
> Does it met the requirements?
> https://technet.microsoft.com/en-us/library/cc786468%28v=ws.10%29.aspx
>
> See 'samba-tool domain passwordsettings --help' if you wanna change
> domain wide password settings.
>
>
>
>> But if you try to change the old password once more (even with the same
>> password you enter right before) it say that the user name or password
>> is invalid.
>> And you can not log anymore using old or new password.
> That's strange. Never heard that. Let me try to reprocuce this.
> - Which Windows OS do you try to do the PW change on?
> - Give an example password that isn't accepted and after that
>    you get into this situation.
>
>
> Regards,
> Marc
>
Hello,

I need to add that this problem ain't just after installation.
When samba was installed it was working good - that why its hard for you 
to reproduce this problem.

#sudo samba-tool domain passwordsettings show
Password informations for domain 'DC=domain,DC=local'

Password complexity: on
Store plaintext passwords: off
Password history length: 24
Minimum password length: 7
Minimum password age (days): 1
Maximum password age (days): 42

If you need please provide me with information what log you need and how 
to collect it for you.

I can try to upgrade it with tar.gz from website but I really not sure 
how to transfer my database from Samba that I installed from Ubuntu Repo 
to the samba compiled by my own.