samba - Feb 2013 - Resetting a User Password From S3 or S4 Member Server

Is it possible to reset a users password from a member server without
knowing the current password? I was able to do this with S3, though it was
not truly a "member" server - I configured the server in question to
have
direct access to OpenLDAP in smb.conf. I have a member server joined to my
S4 domain and a user can change his or her own password via passwd, kpasswd
or smbpasswd, however I would like to have the ability to reset a user's
forgotten password from this server myself.

Thanks,
Thomas

On Tue, 2013-02-05 at 18:45 -0500, Thomas Simmons wrote:
> Is it possible to reset a users password from a member server without
> knowing the current password? I was able to do this with S3, though it was
> not truly a "member" server - I configured the server in question
to have
> direct access to OpenLDAP in smb.conf. 
In this case it would be a co-DC. 
> I have a member server joined to my
> S4 domain and a user can change his or her own password via passwd, kpasswd
> or smbpasswd, however I would like to have the ability to reset a
user's
> forgotten password from this server myself.
Tools like 'samba-tool' can take -H on commands like 'samba-tool
user
setpassword -H ldap://foo'.

There are also many other tools that can do this over many different
protocols, including kpasswd, LDAP and SAMR.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org