samba - May 2008 - "Must Change Password at Next Login" does not work

When setting the "User Must Change Password at Next Login" flag via
usrmgr the user is not prompted to change their password.  The various
Password fields in password backend (tdb) as viewed using pdbedit are
all set to zero, so it is doing something.

Setting this using "net sam pwdmustchangenow" works correctly (i.e.
the
users is prompted to change their password).  It also sets all the
password fields to zero, but I guess it must be doing something else as
well.

System is Centos 5.1 x86_64.
Samba is a GIT snapshot from 26 Apr 2008.

Debug log level 3 and conf files are attached.

If this is a bug let me know and I will log it.

Thanks

Mike


-------------- next part --------------
#
# Generated by /usr/local/samba/modify_samba_config.pl
#
[global]
	idmapconfigalldomains:backend = tdb
	logonhome                 = \\%L\%U\.profiles
	addsharecommand           = /usr/local/samba/modify_samba_config.pl
	deletesharecommand        = /usr/local/samba/modify_samba_config.pl
	maxlogsize                = 50
	usernamemap               = /etc/samba/smbusers
	idmapconfigalldomains:range = 10000 - 50000
	addmachinescript          = /usr/sbin/useradd -n -c "Workstation
(%u)" -M -d /nohome -s /bin/false -g machines "%u"
	deleteuserscript          = /usr/sbin/userdel "%u"
	domainlogons              = Yes
	idmapdomains              = ALLDOMAINS
	winbindnestedgroups       = yes
	logfile                   = /var/log/samba/%m.log
	preferredmaster           = Yes
	winsproxy                 = Yes
	logondrive                = H:
	addusertogroupscript      = /usr/bin/gpasswd -a "%u" "%g"
	workgroup                 = NZHH
	idmapallocconfig:range    = 10000 - 50000
	domainmaster              = Yes
	winbindusedefaultdomain   = yes
	addgroupscript            = /usr/sbin/groupadd "%g"
	idmapallocbackend         = tdb
	deleteuserfromgroupscript = /usr/bin/gpasswd -d "%u" "%g"
	enableprivileges          = yes
	loglevel                  = 3
	adduserscript             = /usr/sbin/useradd "%u" -n -g domusers
	interfaces                = lo, eth0
	hostsallow                = 127., 192.168.43., 192.168.42.
	winbindenumgroups         = Yes
	passdbbackend             = tdbsam:/etc/samba/passdb.tdb
	deletegroupscript         = /usr/sbin/groupdel "%g"
	cupsoptions               = raw
	winssupport               = Yes
	logonpath                 = \\%L\Profiles\%U
	idmapconfigalldomains:default = yes
	serverstring              = Samba Server Version %v
	winbindenumusers          = yes
	oslevel                   = 33

## Section - [share3]
[share3]
	read only                 = No
	comment                   = 
	path                      = /home/samba/share3
	max connections           = 0

## Section - [share1]
[share1]
	readonly                  = No
	comment                   = share1 Testing perl script
	maxconnections            = 100
	path                      = /home/samba/share1

## Section - [share2]
[share2]
	comment                   = share2 Testing perl script
	maxconnections            = 100
	path                      = /home/samba/share2

## Section - [netlogon]
[netlogon]
	readonly                  = yes
	sharemodes                = No
	browseable                = No
	comment                   = Network Logon Service
	path                      = /var/lib/samba/netlogon
	guestok                   = Yes

## Section - [homes]
[homes]
	readonly                  = No
	browseable                = No
	comment                   = Home Directories

## Section - [profiles]
[profiles]
	directorymask             = 0700
	createmask                = 0600
	readonly                  = no
	path                      = /var/lib/samba/profiles

#
# end of generated smb.conf
#

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mike Brady wrote:
> When setting the "User Must Change Password at Next Login" flag
via
> usrmgr the user is not prompted to change their password.  The various
> Password fields in password backend (tdb) as viewed using pdbedit are
> all set to zero, so it is doing something.
> 
> Setting this using "net sam pwdmustchangenow" works correctly
(i.e. the
> users is prompted to change their password).  It also sets all the
> password fields to zero, but I guess it must be doing something else as
> well.
> 
> System is Centos 5.1 x86_64.
> Samba is a GIT snapshot from 26 Apr 2008.
Ok, which git branch ? v3-2-test or v3-0-test ?
> Debug log level 3 and conf files are attached.
The logfile did not make it to the list.
> If this is a bug let me know and I will log it.
Yes, please open a bug for this and attach a log level 10 logfile.

Thanks,
Guenther


- --
G?nther Deschner                    GPG-ID: 8EE11688
Red Hat                         gdeschner@redhat.com
Samba Team                              gd@samba.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFIID30SOk3aI7hFogRAvuyAJ40i/7bJ9NKbhAnfFRQeHyQx0fxYACfXAec
as4weg0ALSnlEupY9VPuKUY=hh2R
-----END PGP SIGNATURE-----

On Tue, 2008-05-06 at 13:16 +0200, Guenther Deschner
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Mike Brady wrote:
> > When setting the "User Must Change Password at Next Login"
flag via
> > usrmgr the user is not prompted to change their password.  The various
> > Password fields in password backend (tdb) as viewed using pdbedit are
> > all set to zero, so it is doing something.
> > 
> > Setting this using "net sam pwdmustchangenow" works
correctly (i.e. the
> > users is prompted to change their password).  It also sets all the
> > password fields to zero, but I guess it must be doing something else
as
> > well.
> > 
> > System is Centos 5.1 x86_64.
> > Samba is a GIT snapshot from 26 Apr 2008.
> 
> Ok, which git branch ? v3-2-test or v3-0-test ?
> 
> > Debug log level 3 and conf files are attached.
> 
> The logfile did not make it to the list.
> 
> > If this is a bug let me know and I will log it.
> 
> Yes, please open a bug for this and attach a log level 10 logfile.
> 
> Thanks,
> Guenther
Apologies. The GIT branch was V3.0-test.

I have opened Bug #5444.  Log and config are attached to the bug.

Let me know if you need anything else.

Thanks

Mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20080507/cf2d9dc5/attachment.bin

Do ya have obey pam enabled on smb.conf? What is the source its using
to authenticate krb or winbind?




On Mon, May 5, 2008 at 5:04 PM, Mike Brady <mike.brady@devnull.net.nz>
wrote:
> When setting the "User Must Change Password at Next Login" flag
via
> usrmgr the user is not prompted to change their password.  The various
> Password fields in password backend (tdb) as viewed using pdbedit are
> all set to zero, so it is doing something.
>
> Setting this using "net sam pwdmustchangenow" works correctly
(i.e. the
> users is prompted to change their password).  It also sets all the
> password fields to zero, but I guess it must be doing something else as
> well.
>
> System is Centos 5.1 x86_64.
> Samba is a GIT snapshot from 26 Apr 2008.
>
> Debug log level 3 and conf files are attached.
>
> If this is a bug let me know and I will log it.
>
> Thanks
>
> Mike
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>