samba - Oct 2003 - Trying to change password: "RAP86: The specified password is invalid."

Good $TIME! ;)

I'm having the following problem with Samba 3.0.0 on a Solaris 8 machine.

root_s07nfs:/opt/samba3/private/ > ls -la
total 24
drwxrwxr-x   2 root     other         96 Oct 14 10:12 .
drwxrwxr-x   9 root     other       4096 Oct  9 07:15 ..
-rw-------   1 root     root        8192 Oct 14 10:11 secrets.tdb
-rw-------   1 root     root           0 Oct 14 10:13 smbpasswd
root_s07nfs:/opt/samba3/private/ > /opt/samba3/bin/smbpasswd -a vz6tml
New SMB password:
Retype new SMB password:
Added user vz6tml.
root_s07nfs:/opt/samba3/private/ > ls -la
total 32
drwxrwxr-x   2 root     other         96 Oct 14 10:12 .
drwxrwxr-x   9 root     other       4096 Oct  9 07:15 ..
-rw-------   1 root     root        8192 Oct 14 10:11 secrets.tdb
-rw-------   1 root     root         106 Oct 14 10:13 smbpasswd
root_s07nfs:/opt/samba3/private/ > cat smbpasswd
vz6tml:1100:33BBCC14D194D2DAD3???F48EE51B785:50C971EB141445781437C06CF1162DBF:[U
]:LCT-3F8BB036:


vz6tml_s07nfs:/u/vz6tml/ > /opt/samba3/bin/smbpasswd
Old SMB password:
New SMB password:
Retype new SMB password:
machine 127.0.0.1 rejected the password change: Error was : RAP86: The specified
password is invalid.
Failed to change password for vz6tml

Uhm, why? The password is correct, I'm sure - after it did not work for the
first 10 times, I switched to Copy'n'Paste for the text 10 tries. Always
the same error message from smbpasswd :(

I also don't quite get, how the smbpasswd binary could write to the
smbpasswd file, since the binary just has 775 rights:

root_s07nfs:/var/log/ > ls -al /opt/samba3/bin/smbpasswd
-rwxr-xr-x   1 root     other    1204900 Oct  1 06:26 /opt/samba3/bin/smbpasswd

IOW, it's not suid root. If I set it suid root, I get this error message:

vz6tml_s07nfs:/u/vz6tml/ > /opt/samba3/bin/smbpasswd
smbpasswd must *NOT* be setuid root.

Well, what am I doing wrong? Why can't I change the users password when
I'm
the user?

Thanks for your help!


root_s07nfs:/var/log/ > /opt/samba3/bin/testparm -s
Load smb config files from /opt/samba3/lib/smb.conf
creating lame upcase table
creating lame lowcase table
creating default valid table
Processing section "[homes]"
NOTE: Service homes is flagged unavailable.
Processing section "[printers]"
NOTE: Service printers is flagged unavailable.
Processing section "[test]"
Processing section "[aaaze]"
Loaded services file OK.
# Global parameters
[global]
        workgroup = EUROPE
        realm = EUROPE.DELPHIAUTO.NET
        server string = Samba Server %v on %h
        interfaces = ge0, lo0
        bind interfaces only = Yes
        pam password change = Yes
        password level = 1
        username level = 1
        unix password sync = Yes
        log level = 3 passdb:5 auth:10 winbind:2
        log file = /opt/samba3/logs/log.%m
        max log size = 128
        debug hires timestamp = Yes
        debug pid = Yes
        debug uid = Yes
        load printers = No
        wins proxy = Yes
        wins server = 130.171.200.151
        ldap ssl = no
        lock directory = /opt/samba3/locks
        pid directory = /opt/samba3/locks
        message command = /usr/bin/mailx -s 'message from %f on %m' root
< %s; rm %s
        remote browse sync = 130.171.200.151
        NIS homedir = Yes

[homes]
        comment = Home Directories
        read only = No
        browseable = No
        available = No

[printers]
        comment = All Printers
        path = /usr/spool/samba
        printable = Yes
        browseable = No
        available = No

[test]
        comment = Testshare
        path = /tmp
        guest ok = Yes

[aaaze]
        comment = aaaze Directories
        path = /opt/samba3/shares/aaaze
        read only = No
        guest ok = Yes



Alexander Skwar
-- 
printk("Illegal format on cdrom.  Pester manufacturer.\n");
	2.2.16 /usr/src/linux/fs/isofs/inode.c

Alexander Skwar wrote:
>         unix password sync = Yes
Setting this to "No" helped.

Alexander Skwar
-- 
Signatur vor?bergehend deaktiviert.