Hi Folks .. Running samba-2.2.7 in Daemon Mode with LDAP; When the user tries to logon and he is forced to change password (via pwdMustChange==0) i get "1727: RPC Call failed" on a Windows XP Machine (de); In the logs i can see that i get an smb_panic(1094) while the child tries to set gid to 65534 (nogroup); well wy does it try to force a chgid to 65534, when changing password ? I guess the problem is somewhere around [2003/01/22 12:00:44, 3] smbd/sec_ctx.c:get_current_groups(172) where the result of get gid == -1 ? wich looks very strange to me .. is i ask nss what gid belongs to this user i get: glas@intern:/var/log/samba$ id uid=1087(glas) gid=100(users) groups=100(users),200(Domain Admins) which is correct .. If the user profile is copied (roaming profiles) and the logon script is run, the user can changes its password using crtl-alt-del it works perfect .. if i try to change the password via smbpasswd -r logon-grz -U glas it works to .. the problem seems only to occure before the profile is written to the client .. even as Domain Admin or via Uid 0 (yust for testing purposes) it does not work .. ;-( .. ------ SNIP ------ 2003/01/22 12:00:29, 3] rpc_server/srv_util.c:get_domain_user_groups(192) domain admin group access 512/7 granted [2003/01/22 12:00:29, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 4792 [2003/01/22 12:00:29, 3] smbd/pipes.c:reply_pipe_write_and_X(198) writeX-IPC pnum=70a1 nwritten=282 [2003/01/22 12:00:29, 3] smbd/process.c:process_smb(878) Transaction 4975 of length 63 [2003/01/22 12:00:29, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 10502) [2003/01/22 12:00:29, 3] smbd/pipes.c:reply_pipe_read_and_X(239) readX-IPC pnum=70a1 min=1024 max=1024 nread=588 [2003/01/22 12:00:43, 3] smbd/process.c:process_smb(878) Transaction 4976 of length 93 [2003/01/22 12:00:43, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 10502) [2003/01/22 12:00:43, 3] smbd/nttrans.c:nt_open_pipe(559) nt_open_pipe: Known pipe samr opening. [2003/01/22 12:00:43, 3] smbd/process.c:process_smb(878) Transaction 4977 of length 198 [2003/01/22 12:00:43, 3] smbd/process.c:switch_message(685) switch message SMBwriteX (pid 10502) [2003/01/22 12:00:43, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(751) api_pipe_bind_req: \PIPE\samr -> \PIPE\lsass [2003/01/22 12:00:43, 3] smbd/pipes.c:reply_pipe_write_and_X(198) writeX-IPC pnum=70a3 nwritten=130 [2003/01/22 12:00:43, 3] smbd/process.c:process_smb(878) Transaction 4978 of length 63 [2003/01/22 12:00:43, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 10502) [2003/01/22 12:00:43, 3] smbd/pipes.c:reply_pipe_read_and_X(239) readX-IPC pnum=70a3 min=1024 max=1024 nread=116 [2003/01/22 12:00:43, 3] smbd/process.c:process_smb(878) Transaction 4979 of length 169 [2003/01/22 12:00:43, 3] smbd/process.c:switch_message(685) switch message SMBwriteX (pid 10502) [2003/01/22 12:00:43, 3] smbd/sec_ctx.c:push_sec_ctx(297) push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1 [2003/01/22 12:00:43, 3] smbd/uid.c:push_conn_ctx(286) push_conn_ctx(104) : conn_ctx_stack_ndx = 0 [2003/01/22 12:00:43, 3] smbd/sec_ctx.c:set_sec_ctx(329) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/01/22 12:00:44, 3] smbd/sec_ctx.c:get_current_groups(172) get_current_groups: user is in 2 groups: -1, 202 [2003/01/22 12:00:44, 3] smbd/sec_ctx.c:pop_sec_ctx(436) pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2003/01/22 12:00:44, 0] lib/util_sec.c:assert_gid(114) Failed to set gid privileges to (0,65534) now set to (0,-1) uid=(0,65534) [2003/01/22 12:00:44, 0] lib/util.c:smb_panic(1094) PANIC: failed to set gid ------ SNIP ------ mfg. Georg Glas