samba - Oct 2024 - How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"

On Mon, 28 Oct 2024 15:01:35 +0100
William David Edwards <wedwards at cyberfusion.nl>
wrote:
> 
> As mentioned before, I'm able to log in with a password set using 
> `userPassword` when `fUserPwdSupport` is enabled.
> 
I have only been using Samba 4 for the last 12 years and I have never
used the 'userPassword' attribute, I have only used the
'unicodePwd'
attribute. I have a bash script to set a users password, but I was lead
to believe that Samba was changed to match Microsoft AD, in that ldaps
had to be used to set/change a users password, so I stopped using it.

In an attempt to understand just what is going wrong with your attempts
to set a users password, I dug the bash script out again, tidied it up
and tried it, it still works :-(

All I can say is, do not believe everything you read.

Would you like a copy of my bash script, it might help you in your
attempts at a python script. 

Rowland

PS: Please stop 'CC'ing me.

Rowland Penny via samba schreef op 2024-10-28 15:32:
> On Mon, 28 Oct 2024 15:01:35 +0100
> William David Edwards <wedwards at cyberfusion.nl> wrote:
>> 
>> As mentioned before, I'm able to log in with a password set using
>> `userPassword` when `fUserPwdSupport` is enabled.
>> 
> 
> I have only been using Samba 4 for the last 12 years and I have never
> used the 'userPassword' attribute, I have only used the
'unicodePwd'
> attribute. I have a bash script to set a users password, but I was lead
> to believe that Samba was changed to match Microsoft AD, in that ldaps
> had to be used to set/change a users password, so I stopped using it.
> 
> In an attempt to understand just what is going wrong with your attempts
> to set a users password, I dug the bash script out again, tidied it up
> and tried it, it still works :-(
> 
> All I can say is, do not believe everything you read.
Again, I've tested and confirmed the behaviour of `userPassword` with 
the heuristic set.
> 
> Would you like a copy of my bash script, it might help you in your
> attempts at a python script.
That would be welcome.
> 
> Rowland
> 
> PS: Please stop 'CC'ing me.
Will do.

Met vriendelijke groeten,

William David Edwards