samba - Mar 2000 - locked out of NT Domain

Hello, our sysop's asked me to forward this:

Hi everybody,

maybe someone can give me a solution to the following problem (get rid of NT
unfortunately is no solution).

Our net environment contains NT4SP5 and SAMBA servers. Workstations run NT4SP3
and SP5. Part of our password policy is to change passwords every thirty days,
and lock the user account after ten unvalid logon attempts. Lately, and it seems
quite random, some user accounts were locked. This happens with clients that
have a connection to a samba server.
The NT eventlog tells me, that the SAMBA-Server tried to logon as such user to
the NT-Domain and fails. The reason ist allways "unknown user or bad
passwort". After ten tries the user account is locked.

So why is that? Any answers would be appreciated.

Klaus Zweig

PS: please excuse the tailing MS/TNEF garbage, this is exchange and I cant stop
it appending it to my mails
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/octet-stream
Size: 2397 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20000324/44233c54/attachment.obj

Hi Klaus,

I have struck a similar problem with pam_ntdom (which I believe uses the
same code). The problem I saw was that there was no way to reflect the fact
that the username/password was correct, but that that it had expired. I did
not find it difficult to modify pam_ntdom to pass this information back to
the user, but I don't know how this would work with Samba.

Regards,

Peter McCool