samba - Dec 2003 - Samba 3 PDC with LDAP - Error when changing userpassword from windows

no, i did it
but, i think if i didn't it, I cannot join Machine while addind machine
account on the fly with Samba...

----- Original Message ----- 
From: "Craig White" <craigwhite@azapple.com>
To: <s.jousse@free.fr>
Cc: <samba@lists.samba.org>
Sent: Thursday, December 18, 2003 6:09 PM
Subject: Re: [Samba] Samba 3 PDC with LDAP - Error when changing
userpassword from windows

> On Thu, 2003-12-18 at 10:04, s.jousse@free.fr wrote:
> > Hi all!
> > I've a Samba 3 PDC with LDAP backend.
> > When I join domain from a WinXP machine, the machine account is added
in
LDAP,
> > it works fine.
> > I can log on this machine with a user I created before with
smbldap-useradd.pl
> > script.
> > When I want to change his password from windows (CTRL-ALT-SUP panel),
it
> > says: "don't have the right permission to do that..."
but password is
changed
> > in LDAP with the new one.
> > And when I log back this user, I need the new password.
> > I'm using smbldap-passwd.pl to change password.
> > In Samba log, i see NT_STATUS_ACCESS_DENIED and
NT_STATUS_WRONG_PASSWORD
> ---
> I'm new at this game but I'll take a guess...
>
> problem with secrets.tdb?
>
> smbpasswd -w <bind password for ldap>
>
> Craig
>
>
>

As far as I know there are only these required elements.

root user must be part of smbpasswd base
smbpasswd -w must be the authentication password with read/write access
to LDAP
I used the scripts from smbldap - that were part of the samba
distribution...sort of, I updated from Red Hat rpm smbldap-tools but
these are the scripts that are run - add user/add group etc.

Check your samba/logs for clues

Craig

On Thu, 2003-12-18 at 10:13, s.jousse@free.fr wrote:
> no, i did it
> but, i think if i didn't it, I cannot join Machine while addind machine
> account on the fly with Samba...
> 
> ----- Original Message ----- 
> From: "Craig White" <craigwhite@azapple.com>
> To: <s.jousse@free.fr>
> Cc: <samba@lists.samba.org>
> Sent: Thursday, December 18, 2003 6:09 PM
> Subject: Re: [Samba] Samba 3 PDC with LDAP - Error when changing
> userpassword from windows
> 
> 
> > On Thu, 2003-12-18 at 10:04, s.jousse@free.fr wrote:
> > > Hi all!
> > > I've a Samba 3 PDC with LDAP backend.
> > > When I join domain from a WinXP machine, the machine account is
added in
> LDAP,
> > > it works fine.
> > > I can log on this machine with a user I created before with
> smbldap-useradd.pl
> > > script.
> > > When I want to change his password from windows (CTRL-ALT-SUP
panel), it
> > > says: "don't have the right permission to do
that..." but password is
> changed
> > > in LDAP with the new one.
> > > And when I log back this user, I need the new password.
> > > I'm using smbldap-passwd.pl to change password.
> > > In Samba log, i see NT_STATUS_ACCESS_DENIED and
NT_STATUS_WRONG_PASSWORD
> > ---
> > I'm new at this game but I'll take a guess...
> >
> > problem with secrets.tdb?
> >
> > smbpasswd -w <bind password for ldap>
> >
> > Craig
> >
> >
> >