samba - Jun 2006 - shadowLastChange not updated

Hello,

We have an otherwise working Samba PDC+LDAP setup but for one minor
detail. The shadowLastChange is not updated when the user sets his
password from a Windows workstation (all the necessary Samba*-fields as
well as userPassword is updated in LDAP).

We've enabled 'ldap passwd sync = Yes' in smb.conf.

slapd.conf contains the appropriate access rule for the said field.

The 'passwd' command correctly updates the shadowLastChange-field, but
enabling the 'unix password sync = yes' leads to the same problems
reported by mikec a month and a half ago.

We're running CentOS 4.3 with the latest updates as well as
smbldap-tools from february 2005 by Idealix. Looking through the source
of the latest versions of these two, I can't find any mention of the
shadowLastChange field, which leads me to think that this still is not
touched in any way by either software in their latest version (3.0.23
and 0.9.2).

Googling I only found some references to ldapchpasswd but my
understanding is that this was mainly used by Samba 2.0?

How should the update of shadowLastChange field be handled with Samba
3.0?

With regards,

Poltsi

-- 
Paul-Erik T?rr?nen, 
Cardinal Information Systems Ltd.
Pursimiehenkatu 29-31 C
00150 Helsinki, Finland
Mobile: +358 (0)40 703 1231
Phone: +358 (0)424 792 204
Fax: +358 (0)424 792 207
http://www.cardinal.fi/

Paul-Erik T?rr?nen wrote:
> Hello,
> 
> We have an otherwise working Samba PDC+LDAP setup but for one minor
> detail. The shadowLastChange is not updated when the user sets his
> password from a Windows workstation (all the necessary Samba*-fields
> as well as userPassword is updated in LDAP).
> 
> We've enabled 'ldap passwd sync = Yes' in smb.conf.
> 
> slapd.conf contains the appropriate access rule for the said field.
> 
> The 'passwd' command correctly updates the shadowLastChange-field,
but
> enabling the 'unix password sync = yes' leads to the same problems
> reported by mikec a month and a half ago.
> 
> We're running CentOS 4.3 with the latest updates as well as
> smbldap-tools from february 2005 by Idealix. Looking through the
> source of the latest versions of these two, I can't find any mention
> of the shadowLastChange field, which leads me to think that this
> still is not touched in any way by either software in their latest
> version (3.0.23 and 0.9.2).
> 
> Googling I only found some references to ldapchpasswd but my
> understanding is that this was mainly used by Samba 2.0?
> 
> How should the update of shadowLastChange field be handled with Samba
> 3.0?
This worked for me.

http://lists.samba.org/archive/samba/2005-June/106335.html

Dean