Hi list
I'm have a samba (2:3.5.4~dfsg-1ubuntu8.4) domain with LDAP backend and
I'm getting the following error when I try to change my domain password
via Windows XP:
"The User name or old password is incorrect. Letters in passwords must
be typed using the correct case".
The password is typed correctly and it does get changed in LDAP though.
This snippet from the log may be the culprit:
[2011/05/26 12:22:14.392666, 5] lib/smbldap.c:1556(smbldap_modify)
smbldap_modify: dn => [uid=torkil,ou=Users,dc=drcmr,dc=local]
[2011/05/26 12:22:14.392990, 10] lib/smbldap.c:1576(smbldap_modify)
Failed to modify dn: uid=torkil,ou=Users,dc=drcmr,dc=local, error: 16
(No such attribute) (modify/delete: sambaNTPassword: no such value)
[2011/05/26 12:22:14.393027, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 1
[2011/05/26 12:22:14.393046, 5]
rpc_server/srv_samr_nt.c:1954(_samr_ChangePasswordUser2)
_samr_ChangePasswordUser2: 1954
[2011/05/26 12:22:14.393059, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_ChangePasswordUser2: struct samr_ChangePasswordUser2
out: struct samr_ChangePasswordUser2
result : NT_STATUS_UNSUCCESSFUL
The attribute sambaNTPassword is present on the object, so that makes no
sense?
I'm also seeing this error:
[2011/05/26 12:22:15.512074, 0]
../libcli/auth/smbencrypt.c:589(decode_pw_buffer)
decode_pw_buffer: incorrect password length (1024268875).
[2011/05/26 12:22:15.512087, 0]
../libcli/auth/smbencrypt.c:590(decode_pw_buffer)
decode_pw_buffer: check that 'encrypt passwords = yes'
[2011/05/26 12:22:15.512100, 5]
rpc_server/srv_samr_nt.c:1954(_samr_ChangePasswordUser2)
_samr_ChangePasswordUser2: 1954
[2011/05/26 12:22:15.512111, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_ChangePasswordUser2: struct samr_ChangePasswordUser2
out: struct samr_ChangePasswordUser2
result : NT_STATUS_WRONG_PASSWORD
Any suggestions? I found this problem when I installed pam_passwdqc,
which seem to work.
Thanks,
Torkil
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
