samba - Jul 2017 - update google password using samba password chat

Dear all,

I am checking out all possibilities to update  a google password when a
user changes his/her samba password..
I tested with  "passwd program="
But my script /sbin/update-google  never gets executed

The script uses GAM  to update the password ( https://github.com/jay0lee/GAM
 )



samba Version 4.2.14-Debian

[general]
       unix password sync = yes
       passwd program=/sbin/update-google %u
       passwd chat= *password* %n\n *google-password-updated*
       passwd chat debug = yes
       log level = 100

Every idea or suggestion is more than welcome....

regards,


Johan Verdoodt
Belgium

On Mon, 3 Jul 2017 09:35:15 +0200
Johan Verdoodt via samba <samba at lists.samba.org> wrote:
> Dear all,
> 
> I am checking out all possibilities to update  a google password when
> a user changes his/her samba password..
> I tested with  "passwd program="
> But my script /sbin/update-google  never gets executed
> 
> The script uses GAM  to update the password
> ( https://github.com/jay0lee/GAM )
> 
> 
> 
> samba Version 4.2.14-Debian
> 
> [general]
>        unix password sync = yes
>        passwd program=/sbin/update-google %u
>        passwd chat= *password* %n\n *google-password-updated*
>        passwd chat debug = yes
>        log level = 100
> 
OK, 'unix password sync' is meant to be used in [global], you seem to
have it in a share. 

Can we see your entire smb.conf.

Rowland

On Mon, 2017-07-03 at 09:35 +0200, Johan Verdoodt via samba
wrote:
> Dear all,
> 
> I am checking out all possibilities to update  a google password when a
> user changes his/her samba password..
> I tested with  "passwd program="
> But my script /sbin/update-google  never gets executed
> The script uses GAM  to update the password (
https://github.com/jay0lee/GAM
>  )
> 
If you are running the Samba AD DC, then for 4.5 you can use the
'samba-tool user syncpasswords' tool.  
https://www.samba.org/samba/history/samba-4.5.0.html

For Samba 4.7 you can use the new 'password hash userPassword schemes'
option to store a crypt() password when the user's password is changed,
rather than a GPG encrypted plaintext.

The 'passwd program' does not operate on the AD DC.

I hope this helps,

Andrew Bartlett


-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

>The 'passwd program' does not operate on the AD DC.
Ok that explains a lot.

Thanks  !   I will checkout the docs :-)

2017-07-03 10:34 GMT+02:00 Andrew Bartlett <abartlet at samba.org>:
> On Mon, 2017-07-03 at 09:35 +0200, Johan Verdoodt via samba wrote:
> > Dear all,
> >
> > I am checking out all possibilities to update  a google password when
a
> > user changes his/her samba password..
> > I tested with  "passwd program="
> > But my script /sbin/update-google  never gets executed
>
> > The script uses GAM  to update the password (
> https://github.com/jay0lee/GAM
> >  )
> >
>
> If you are running the Samba AD DC, then for 4.5 you can use the
> 'samba-tool user syncpasswords' tool.
> https://www.samba.org/samba/history/samba-4.5.0.html
>
> For Samba 4.7 you can use the new 'password hash userPassword
schemes'
> option to store a crypt() password when the user's password is changed,
> rather than a GPG encrypted plaintext.
>
> The 'passwd program' does not operate on the AD DC.
>
> I hope this helps,
>
> Andrew Bartlett
>
>
> --
> Andrew Bartlett                       http://samba.org/~abartlet/
> Authentication Developer, Samba Team  http://samba.org
> Samba Developer, Catalyst IT          http://catalyst.net.nz/
> services/samba
>
>

-- 
Mvg,

Bednet vzw - synchroon internetonderwijs
Met steun van de Vlaamse Overheid

Johan Verdoodt
Stapsteenweg 1B, 9070 Destelbergen
✆ +32 (0) 479/ 45 19 17

Volg ons op Facebook <http://www.facebook.com/bednet> en Twitter
<http://www.twitter.com/BednetBE>
https://www.bednet.be

Mandi! Johan Verdoodt via samba
  In chel di` si favelave...
> Every idea or suggestion is more than welcome....
Sorry for the very late answer.


You can also use 'check password script' for things like that.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

On Mon, 10 Jul 2017 15:15:35 +0200
Marco Gaiarin via samba <samba at lists.samba.org> wrote:
> Mandi! Johan Verdoodt via samba
>   In chel di` si favelave...
> 
> > Every idea or suggestion is more than welcome....
> 
> Sorry for the very late answer.
> 
> 
> You can also use 'check password script' for things like that.
> 
Sorry, but I fail to see how a script to check password complexity will
help in changing a google password.

Rowland