samba - Jun 2008 - Sure, it's a newbie thing, but I'm willing to be at least ONE person has been bit by this....

Hi All,

I have a Samba system I fire up once in a blue moon for testing, and had 
a bit of a minor heart attack when it "suddenly" stopped letting me 
access shares as anyone other than root. Security is set to "user"
since
it's not a domain member server. My office requires that passwords get 
changed every 90 days, and the last time I accessed the server was on 
the other side of one of these "90-day" boundries. I realized this
after
I increased the Samba logging level and it was telling me it at least 
recognized my username. So, it must of hated my password. I used 
smbpasswd -U as root to reset my user password. Suddenly I can get in.

Now, one small question, is there a tool that lets me automatically sync 
my samba password with the password on the same Unix box? Or am I doomed 
to have to change it manually every 90 days as well. (It's only one more 
place to change my password...)

Thanks,

Brian

you can always set up an LDAP server on top of the samba server and it will
control the login and
smb password , so you will need to change the password in one location and the
samba will take the
permissions from there.	

http://download.gna.org/smbldap-tools/docs/samba-ldap-howto/

Assaf


On Thursday 19 June 2008 14:25:11 Brian Cowan wrote:
> Hi All,
>
> I have a Samba system I fire up once in a blue moon for testing, and had
> a bit of a minor heart attack when it "suddenly" stopped letting
me
> access shares as anyone other than root. Security is set to
"user" since
> it's not a domain member server. My office requires that passwords get
> changed every 90 days, and the last time I accessed the server was on
> the other side of one of these "90-day" boundries. I realized
this after
> I increased the Samba logging level and it was telling me it at least
> recognized my username. So, it must of hated my password. I used
> smbpasswd -U as root to reset my user password. Suddenly I can get in.
>
> Now, one small question, is there a tool that lets me automatically sync
> my samba password with the password on the same Unix box? Or am I doomed
> to have to change it manually every 90 days as well. (It's only one
more
> place to change my password...)
>
> Thanks,
>
> Brian





IMPORTANT . this email and the information in it may be confidential, legally
privileged and/or protected by law. It is intended solely for the use of the
person to whom it is addressed. If you are not the intended recipient, please
notify the sender immediately and do not disclose the contents to any other
person, use it for any purpose, or store or copy the information in any medium.
Please also delete all copies of this email and any attachments from your
system.

We cannot guarantee the security or confidentiality of email communications. We
do not accept any liability for losses or damages that you may suffer as a
result of your receipt of this email including but not limited to computer
service or system failure, access delays or interruption, data non-delivery or
mis-delivery, computer viruses or other harmful components.

Copyright in this email and any attachments belong to Select Service Partner UK
Limited. Should you communicate with anyone at Select Service Partner UK Limited
by
email, you consent to us monitoring and reading any such correspondence.

Nothing in this email shall be taken or read as suggesting, proposing or
relating to any agreement concerted practice or other practice that could
infringe UK or EC competition legislation.

Select Service Partner UK Limited is a company registered in England and Wales
(company number 05687183) whose registered office is at 1 The Heights,
Brooklands, Weybridge. Surrey. KT13 0NY

Brian Cowan wrote:
> Hi All,
>
> I have a Samba system I fire up once in a blue moon for testing, and 
> had a bit of a minor heart attack when it "suddenly" stopped
letting
> me access shares as anyone other than root. Security is set to
"user"
> since it's not a domain member server. My office requires that 
> passwords get changed every 90 days, and the last time I accessed the 
> server was on the other side of one of these "90-day" boundries.
I
> realized this after I increased the Samba logging level and it was 
> telling me it at least recognized my username. So, it must of hated my 
> password. I used smbpasswd -U as root to reset my user password. 
> Suddenly I can get in.
>
> Now, one small question, is there a tool that lets me automatically 
> sync my samba password with the password on the same Unix box? Or am I 
> doomed to have to change it manually every 90 days as well. (It's only 
> one more place to change my password...)
>
> Thanks,
>
> Brian
PAM can sync the passwords.  The setting is 'pam password change = Yes'.

 From man 5 smb.conf:
"With the addition of better PAM support in Samba 2.2, this parameter, 
it is possible to use PAM's password change control flag for Samba. If 
enabled, then PAM will be used for password changes when requested by an 
SMB client instead of the program listed in passwd program. It should be 
possible to enable this without changing your passwd chat parameter for 
most setups."

Another way is to use webmin and it's user and samba modules; there's an
option to sync users and passwords between the two, but it means that 
you'll have to keep using it for user management.