We have Samba authenticating to ldap and we want our users to be able to
change their Samba password from their Windows 98 computers. We see
this when we try to change passwords from Windows 98 machines now:
Apr 22 15:34:26 localhost smbd[19796]: [2003/04/22 15:34:26.550425, 0,
pid=19796, effective(0, 0), real(0, 0)]
passdb/pdb_ldap.c:ldap_connect_system(316)
Apr 22 15:34:26 localhost smbd[19796]: ldap_connect_system: Binding to
ldap server as "cn=Manager,dc=bryantschools,dc=org"
Apr 22 15:34:28 localhost smbd[19796]: [2003/04/22 15:34:28.552698, 0,
pid=19796, effective(0, 0), real(0, 0)]
passdb/pampass.c:smb_pam_passchange(865)
Apr 22 15:34:28 localhost smbd[19796]: smb_pam_passchange: PAM:
Password Change Failed for user bmsstudent!
We have the following in our smb.conf:
[global]
workgroup = BRYANT
netbios name = SAMBA
server string = Bryant Samba File Server
encrypt passwords = Yes
passwd chat debug = Yes
security = user
os level = 33
log level = 2
syslog = 2
log file = /var/log/samba/log.%m
max log size = 50
debug hires timestamp = Yes
debug pid = Yes
debug uid = Yes
time server = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
logon script = logon.bat
domain logons = Yes
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
read only = No
short preserve case = No
logon drive = Z:
logon home = \\samba\profile
logon path = \\samba\profile
printcap name = cups
printing = cups
load printers = Yes
unix password sync = Yes
# passwd program = /usr/bin/passwd %u
# passwd chat = *New* password* %n\n *new* password* %n\n *changed*
# add user script = /usr/sbin/useradd -d /dev/null -g machines -c
'Machine Account' -s /bin/false -M %u
passwd program = /usr/local/sbin/smbldap-passwd.pl %u
passwd chat = *New*password* %n\n *new*password* %n\n *changed
successfully*
;Samba-LDAP Declarations
ldap suffix = dc=bryantschools,dc=org
ldap admin dn = cn=Manager,dc=bryantschools,dc=org
ldap port = 389
ldap server = 127.0.0.1
ldap ssl = no
add user script = /usr/local/sbin/smbldap-useradd.pl -m -d
/dev/null -g 1013 -c 'Machine Account' -s /bin/false -M %u
character set = iso8859-1
utmp = yes
pam password change = yes
null passwords = yes
oplocks = no
level2 oplocks = no
blocking locks = no
veto files
=/*.scr/sample.exe/httpodbc.dll/csrss.exe/*.eml/*.nws/*.{*}
Could someone tell me what I'm doing wrong? Why can't users change
their passwords from Windows 98?
Thanks,
Tait Shrum
