lucarasp@inwind.it
2004-Sep-29 09:50 UTC
[Samba] sambaPwdMustChange not properly set with smbldap
I'm using samba 3.0.6 on fedora core 1 with LDAP enabled and smbldap-tools. When I change a user password with smbldap-passwd <username>, i find that sambaPwdMustChange attribute is correctly set to 30 days later as set in smbldap_conf. But, if I try to change password from any Win2000 or WinXP client with CTRL+ALT+CANC --> CHANGE PASSWORD i notice that sambaPwdMustChange attribute is always set to 2147483647. I have tryed different setups in smb.conf but nothing has changed. Here is last config..... security = user password level = 8 username level = 8 encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd passdb backend = ldapsam:"ldap://localhost" smbpasswd ldap suffix = dc=myfactory,dc=mycountry ldap admin dn = cn=Manager,dc=myfactory,dc=mycountry ldap ssl = no ldap group suffix = ou=Group ldap machine suffix = ou=Machine ldap user suffix = ou=People passwd program = /usr/local/sbin/smbldap-passwd.pl -u %u passwd chat = *new*password* %n\n *Retype*new*password* %n\n *successfully* passwd chat debug = yes #unix password sync = Yes ldap passwd sync = yes admin users = root, administrator add user script = /usr/local/sbin/smbldap-useradd.pl -a delete user script = /usr/local/sbin/smbldap-useradd.pl -d add group script = /usr/local/sbin/smbldap-useradd.pl -a -g delete group script = /usr/local/sbin/smbldap-useradd.pl -d -g add user to group script = /usr/local/sbin/smbldap-useradd.pl -j -u delete user from group script = /usr/local/sbin/smbldap-useradd.pl -j -u set primary group script = /usr/local/sbin/smbldap-useradd.pl -m -u add machine script = /usr/local/sbin/smbldap-useradd.pl -a -m # unix password sync = Yes # passwd program = /usr/bin/passwd %u # passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* Any idea? thanks! ciao luca ____________________________________________________________ Libero ADSL Free - Velocita' 1280 Kbit/s, attivazione e traffico 2004 gratis! Abbonati su http://www.libero.it