Ok. I can confirm that the above issues are indeed related to #579647. My original configuration (LDAP,samba,pam) works on lenny with samba from backports.
After upgrading libldap-2.4-2 2.4.11-1+lenny2 -> 2.4.23-6 which pulls in libgcrypt11 1.4.1-1 -> 1.4.5-2 libgnutls26 2.4.2-6+lenny2 -> 2.8.6-1 libgpg-error0 1.4-2 -> 1.6-1 libtasn1-3 1.4-1 -> 2.7-1 the problems described above occur. After downgrading libldap-2.4-2 libgnutls26 to their original versions, "su" and "pam_smbpasswd" work correctly again. Unfortunately, switching from libnss-ldap to libnss-ldapd (as suggested in #579647) does not help. So, I am afraid that until this issue is resolved, users are not able to change their samba passwords. cheers, Hp -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

