samba - Jul 1999 - Users Cannot Use smbpasswd to Change Samba Passwords

Running Samba 2.0.3 on a Digital Unix 4.0D system.  All functions of the 
new Samba version appear to run properly (previously ran 1.9.15) with 
exception of users being able to change their own Samba password 
(root is only able to change password on behalf of users).  

Following is permissions assigned to smbpasswd:

-rwxr-xr-x   1 root     system    901120 Mar 31 16:06 smbpasswd

Following is what occurs when root attempts to change a user's password:

# smbpasswd mickey
New SMB password:
Retype new SMB password:
Password changed for user mickey.

Following is what occurs when the user attempts to change their own
password:

system> whoami
mickey

system> ./smbpasswd
Old SMB password:
New SMB password:
Retype new SMB password:
machine 127.0.0.1 rejected the session setup. Error was : ERRSRV - ERRbadpw 
(Bad password - name/password pair in a Tree Connect or Session Setup are 
invalid.).  Failed to change password for mickey

User can access unix system via Samba when password is changed by root but 
cannot consistently change their own password (even after root changes it
for 
them).

Appreciate any assistance on how to allow users to change their own Samba 
passwords.

Thank You

Wade Williston

Williston, Wade wrote:
> 
> Running Samba 2.0.3 on a Digital Unix 4.0D system.  All functions of the
> new Samba version appear to run properly (previously ran 1.9.15) with
> exception of users being able to change their own Samba password
> (root is only able to change password on behalf of users).
> 
> system> whoami
> mickey
> 
> system> ./smbpasswd
> Old SMB password:
> New SMB password:
> Retype new SMB password:
> machine 127.0.0.1 rejected the session setup. Error was : ERRSRV - ERRbadpw
> (Bad password - name/password pair in a Tree Connect or Session Setup are
> invalid.).  Failed to change password for mickey
> 
This means that smbpasswd is using loopback interface to connect to smbd
in order to create password hashes. Make sure you have included
127.0.0.1/255.0.0.0 in your interfaces parameter in smb.conf.

Hope this helps

Michal