samba - Nov 2002 - Changing passwords under Win2K/WinXP (Samba 2.2.6)

G'day all...

Has anyone had any success in achieving the above, without requiring the 
user to run smbpasswd on the samba server?

On the client machine (2000 or XP) when I press ctrl-alt-del and attempt 
to change the password I get the error "The User name or old password is 
incorrect..."

I need to keep things as simple as possible for my users, they're not 
highly computer literate and like to keep things simple. Asking them to 
telnet into a *nix box and run programs isn't in the picture. (Especially 
when you've already had to push for *nix solution.)

FWIW, I'm running Samba 2.2.6 and can provide my smb.conf or excerpts upon 
request.

Thanks heaps...

Mike
---
Michael S. E. Kraus
Administration
Capital Holdings Group (NSW) Pty Ltd
mkraus@capitalholdings.com.au
phone (02) 9955 8000 fax (02) 9955 8144

Yes, with W2K, don't know about XP.  Are you setting Samba up as a PDC? If 
yes, I would have to say you have a problem with your password chat?

- john

--On Tuesday, November 19, 2002 9:25 AM +1000 mkraus@capitalholdings.com.au 
wrote:
> G'day all...
>
> Has anyone had any success in achieving the above, without requiring the
> user to run smbpasswd on the samba server?

Yes, I the Samba server is the PDC.

Here's some excerpts from my smb.conf file:

[global]

        ; PDC and master browser settings
        os level = 64
        preferred master = yes
        local master = yes
        domain master = yes

        ;security and logging
        security = user
        encrypt passwords = yes
        domain logons = yes
        log file = /var/log/samba/log.%m
        log level = 2
        max log size = 50
        hosts allow = 127.0.0.1 192.168.100.0/255.255.255.0

        ;sync Linux passwords
        unix password sync = yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* 
%n\n *Enter*new*UNIX*password* %n\n *Retype*ne
w*UNIX*password* %n\n *passwd: 
*all*authentication*tokens*updated*successfully*


I originally took these settings from an IBM Howto. However I'm wondering 
about the "security = user" part and the password chat dialogue.

Any guidance/help given appreciated...

TIA...!

Mike 
---
Michael S. E. Kraus
Administration
Capital Holdings Group (NSW) Pty Ltd
mkraus@capitalholdings.com.au
phone (02) 9955 8000 fax (02) 9955 8144




John Benedetto <jbenedet@unm.edu>
Sent by: samba-admin@lists.samba.org
19/11/2002 09:38 AM

 
        To:     mkraus@capitalholdings.com.au, samba@lists.samba.org
        cc: 
        Subject:        Re: [Samba] Changing passwords under Win2K/WinXP (Samba
2.2.6)


Yes, with W2K, don't know about XP.  Are you setting Samba up as a PDC? If 

yes, I would have to say you have a problem with your password chat?

- john

--On Tuesday, November 19, 2002 9:25 AM +1000 
mkraus@capitalholdings.com.au 
wrote:
> G'day all...
>
> Has anyone had any success in achieving the above, without requiring the
> user to run smbpasswd on the samba server?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

G'day John and all...

Thanks for the hints... and I did a bit of poking around `man 5 smb.conf` 
...

I changed:

        ;sync Linux passwords
        unix password sync = yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* 
%n\n *Enter*new*UNIX*password* %n\ *Retype*new*UNIX*password* %n\n 
*passwd: *all*authentication*tokens*updated*successfully*
 
to:

        ;sync Linux passwords
        unix password sync = yes
        pam password change = yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* 
%n\n *passwd: *all*authentication*tokens*updat
ed*successfully*

And it seemed to do the trick... Is it necessary to use `passwd program = 
/usr/bin/passwd %u` line with the `pam password change = yes` line now?

Thanks...

Mike
---
Michael S. E. Kraus
Administration
Capital Holdings Group (NSW) Pty Ltd
mkraus@capitalholdings.com.au
phone (02) 9955 8000 fax (02) 9955 8144




mkraus@capitalholdings.com.au
Sent by: samba-admin@lists.samba.org
19/11/2002 10:55 AM

 
        To:     John Benedetto <jbenedet@unm.edu>
        cc:     samba@lists.samba.org
        Subject:        Re: [Samba] Changing passwords under Win2K/WinXP (Samba
2.2.6)


Yes, I the Samba server is the PDC.

Here's some excerpts from my smb.conf file:

[global]

        ; PDC and master browser settings
        os level = 64
        preferred master = yes
        local master = yes
        domain master = yes

        ;security and logging
        security = user
        encrypt passwords = yes
        domain logons = yes
        log file = /var/log/samba/log.%m
        log level = 2
        max log size = 50
        hosts allow = 127.0.0.1 192.168.100.0/255.255.255.0

        ;sync Linux passwords
        unix password sync = yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* 
%n\n *Enter*new*UNIX*password* %n\n *Retype*ne
w*UNIX*password* %n\n *passwd: 
*all*authentication*tokens*updated*successfully*


I originally took these settings from an IBM Howto. However I'm wondering 
about the "security = user" part and the password chat dialogue.

Any guidance/help given appreciated...

TIA...!

Mike 
---
Michael S. E. Kraus
Administration
Capital Holdings Group (NSW) Pty Ltd
mkraus@capitalholdings.com.au
phone (02) 9955 8000 fax (02) 9955 8144




John Benedetto <jbenedet@unm.edu>
Sent by: samba-admin@lists.samba.org
19/11/2002 09:38 AM

 
        To:     mkraus@capitalholdings.com.au, samba@lists.samba.org
        cc: 
        Subject:        Re: [Samba] Changing passwords under Win2K/WinXP 
(Samba 2.2.6)


Yes, with W2K, don't know about XP.  Are you setting Samba up as a PDC? If 


yes, I would have to say you have a problem with your password chat?

- john

--On Tuesday, November 19, 2002 9:25 AM +1000 
mkraus@capitalholdings.com.au 
wrote:
> G'day all...
>
> Has anyone had any success in achieving the above, without requiring the
> user to run smbpasswd on the samba server?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba