James Herschel
2004-Apr-27 16:14 UTC
[Samba] Password changes to /etc/passwd, but not smbpasswd
Hello, I've Googled and done some mailing list searches, but can't figure out the following . When a user on a Windows 2000 machine attempts to change their password, the change gets applied to /etc/passwd, but not to smbpasswd. The error I receive from Windows is: "The system cannot change your password right now because the domain .. Is not available". (The domain is available as far as I can tell). My Samba logs show the following: [2004/04/27 10:44:57, 0] smbd/chgpasswd.c:check_oem_password(832) check_oem_password: incorrect password length (1985167808). Thanks in advance for any help you can give . I've just re-inherited a client from a year ago where the HD's completely crashed and the jackass who was here didn't do any backups. When I left a year ago it worked . now, I'm not sure what the deal is. James Here's my smb.conf . [global] workgroup = PJGLEASE.COM netbios name = SERVE-ON server string = Workgroup Server passwd program = /usr/bin/passwd %u passwd chat = *new*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*password*updated*successfully* passwd chat debug = Yes passwd chat timeout = 5 unix password sync = Yes log file = /var/log/samba/log.%m max log size = 50 name resolve order = wins lmhosts hosts bcast printcap name = cups add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M %u logon script = logon.bat logon drive = Z: logon home = \\serve-on\%u domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap ssl = no printing = cups [homes] comment = Home Directories path = %H read only = No browseable = No [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon guest ok = Yes browseable = No share modes = No [printers] comment = All Printers path = /var/spool/samba create mask = 0600 guest ok = Yes printable = Yes use client driver = Yes default devmode = Yes browseable = No [office] comment = Public Stuff path = /home/office write list = @office force group = +office read only = No create mask = 0660 directory mask = 0770 guest ok = Yes [postoffice] comment = MS Mail PostOffice path = /home/postoffice write list = @office read only = No guest ok = Yes [ImageClass] comment = CANON ImageClass 4000 path = /var/spool/samba read only = No create mask = 0600 guest ok = Yes printable = Yes printer name = ImageClass use client driver = Yes default devmode = Yes oplocks = No share modes = No
sambalist@dowcarter.com
2004-Apr-27 17:10 UTC
[Samba] Password changes to /etc/passwd, but not smbpasswd
This seems to be due to applying the latest set of Microsoft security patches. I've just discovered this problem myself today. Unpatched machines work fine, but as soon as they are patched you can't changes passwords. I don't know _which_ of the patches is to blame, but I think it's one of the five most recently announced. I am going to attempt to discovered which one it is. Richard.> -----Original Message----- > From: samba-bounces+sambalist=dowcarter.com@lists.samba.org > [mailto:samba-bounces+sambalist=dowcarter.com@lists.samba.org] > On Behalf Of James Herschel > Sent: 27 April 2004 17:16 > To: samba@lists.samba.org > Subject: [Samba] Password changes to /etc/passwd, but not smbpasswd > > Hello, > > I've Googled and done some mailing list searches, but can't > figure out the following . > > When a user on a Windows 2000 machine attempts to change > their password, the change gets applied to /etc/passwd, but > not to smbpasswd. > > The error I receive from Windows is: "The system cannot > change your password right now because the domain .. Is not > available". (The domain is available as far as I can tell). > > My Samba logs show the following: [2004/04/27 10:44:57, 0] > smbd/chgpasswd.c:check_oem_password(832) check_oem_password: > incorrect password length (1985167808). > > Thanks in advance for any help you can give . I've just > re-inherited a client from a year ago where the HD's > completely crashed and the jackass who was here didn't do any > backups. When I left a year ago it worked . > now, I'm not sure what the deal is. > > James > > Here's my smb.conf . > > [global] > workgroup = PJGLEASE.COM > netbios name = SERVE-ON > server string = Workgroup Server > passwd program = /usr/bin/passwd %u > passwd chat = *new*UNIX*password* %n\n > *Retype*new*UNIX*password* %n\n > *passwd:*password*updated*successfully* > passwd chat debug = Yes > passwd chat timeout = 5 > unix password sync = Yes > log file = /var/log/samba/log.%m > max log size = 50 > name resolve order = wins lmhosts hosts bcast > printcap name = cups > add user script = /usr/sbin/useradd -d /dev/null -g > machines -c 'Machine Account' -s /bin/false -M %u > logon script = logon.bat > logon drive = Z: > logon home = \\serve-on\%u > domain logons = Yes > os level = 65 > preferred master = Yes > domain master = Yes > wins support = Yes > ldap ssl = no > printing = cups > > [homes] > comment = Home Directories > path = %H > read only = No > browseable = No > > [netlogon] > comment = Network Logon Service > path = /var/lib/samba/netlogon > guest ok = Yes > browseable = No > share modes = No > > [printers] > comment = All Printers > path = /var/spool/samba > create mask = 0600 > guest ok = Yes > printable = Yes > use client driver = Yes > default devmode = Yes > browseable = No > > [office] > comment = Public Stuff > path = /home/office > write list = @office > force group = +office > read only = No > create mask = 0660 > directory mask = 0770 > guest ok = Yes > > [postoffice] > comment = MS Mail PostOffice > path = /home/postoffice > write list = @office > read only = No > guest ok = Yes > > [ImageClass] > comment = CANON ImageClass 4000 > path = /var/spool/samba > read only = No > create mask = 0600 > guest ok = Yes > printable = Yes > printer name = ImageClass > use client driver = Yes > default devmode = Yes > oplocks = No > share modes = No > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >