RE: [Samba] Change system/samba password via webmin
I think Usermin is what you need, rather than webmin. You can limit the modules available to the user- probably Change Password is all that you would want. This will change the Unix and Samba passwords. At 11:07 PM 9/28/2006, Ivan Arteaga wrote: Hi, Basically what I need is the windows users be able to change the unix/linux password because when I installed the server I defined the same username as pass. I am running sendmail and samba(PDC) in the same box, so the system password is the same mail and windows domain pass. And I want to find an easy way for the users change the initial password for their own. I defined the users in the webmin as webmin users and gived them access to the /change system pass/ option in the Samba module 'Configure automatic Unix and Samba user synchronization' But it only changes the system pass, not the samba pass. Do you have any ideas? Thanks in advance ^^ --Ivan. -Original Message- From: Gary Dale [mailto:[EMAIL PROTECTED] Sent: Thursday, September 28, 2006 10:11 PM To: Ivan Arteaga; samba@lists.samba.org Subject: Re: [Samba] Change system/samba password via webmin Ivan Arteaga wrote: Hi List, I need my users to change their passwords, so I defined them as webmin users and gived them access only to the system/change password option to do so. So far so good... they changed their system passwords (in order to access email) but the change it's not reflected in samba passwords. I defined the option change password in other modules in webmin but it doesn't works, I also have in the smb.conf unix password sync = yes but the same. I will appreciate if somebody can give me an idea about how to ride this, or maybe using another app? o_0 Thanks in advance. --Ivan. I'm not quite sure what you are asking. Assuming that when you say system password, you are referring to the Windows domain password, and when you say Samba password, you are referring to the Unix/Linux password, then one obvious place to check is password change dialog in smb.conf. It has to match what your Unix/Linux password program is doing (it use expect to get the passwd prompts and feed it the passwords). Otherwise, check the list archives. There have been a couple other similar problems recently that had different solutions. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA in hybrid mode
I think you may have been bitten by this change in behavior- I was. I assume using LDAP would provide similar behavior to a Windows Domain Controller. http://info.ccone.at/INFO/Samba/upgrading-to-3.0.html Changes in Behavior The following issues are known changes in behavior between Samba-2.2 and Samba-3 that may affect certain installations of Samba. When operating as a member of a Windows domain, Samba-2.2 would map any users authenticated by the remote DC to the guest account if a uid could not be obtained via the getpwnam() call. Samba-3 rejects the connection as NT_STATUS_LOGON_FAILURE. There is no current work around to re-establish the Samba-2.2 behavior. I was providing guest printing on a NT-4 Domain member SAMBA server. After the upgrade from 2.28 to 3.010, I had to make the print server a stand-alone machine again because guest printing was not working as desired (see my ealier post below). Subject: [Samba] Guest Printing Broke after upgrade from 2.28 to 3.010 X-BeenThere: samba@lists.samba.org X-Mailman-Version: 2.1.4 List-Id: General questions regarding Samba samba.lists.samba.org List-Unsubscribe: https://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] List-Archive: http://lists.samba.org/archive/samba List-Post: mailto:samba@lists.samba.org List-Help: mailto:[EMAIL PROTECTED] List-Subscribe: https://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] Sender: [EMAIL PROTECTED] I'm running a CUPS print server with SuSe 9.0 Pro with printers shared through Samba. I've recently upgraded from 2.28 to 3.010. My server is a member of an NT 4 domain. I run winbind to authenticate users to the domain; however, I also allow guest printing because many laptop users' machines are not domain members. There has been a change in guest printing behavior after the upgrade. Domain authentication is working fine. Guest printing (desired) is working OK if the guest's username is not a valid domain username. However, guest printing for laptop users who have domain accounts but are not logged in to the domain does not work and actually locks the user's domain account. In Samba 2.28, these users would map to nobody and could print as desired. I have tried changing the winbind use default domain parameter, the allow trusted domains parameter, etc. with no change. I'd like to be able to authenticate users if possible, but still provide guest printing to laptop users. snip At 05:28 AM 1/1/2005, you wrote: Hi, I am trying to setup my SAMBA server to use both user and share security so I can have share printers for all clients without authentication while protecting the file shares. Does anyone have a working example that I can use as a reference? I am running Debian sarge with SAMBA 3.0.10-1. I currently have a working SAMBA server running in user security mode. I am using LDAP as the backend authentication. I appreciate any help you can provide. Roger -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Guest Printing Broke after upgrade from 2.28 to 3.010
I'm running a CUPS print server with SuSe 9.0 Pro with printers shared through
Samba. I've recently upgraded from 2.28 to 3.010. My server is a member of an
NT 4 domain. I run winbind to authenticate users to the domain; however, I
also allow guest printing because many laptop users' machines are not domain
members.
There has been a change in guest printing behavior after the upgrade. Domain
authentication is working fine. Guest printing (desired) is working OK if the
guest's username is not a valid domain username. However, guest printing for
laptop users who have domain accounts but are not logged in to the domain does
not work and actually locks the user's domain account. In Samba 2.28, these
users would map to nobody and could print as desired.
I have tried changing the winbind use default domain parameter, the allow
trusted domains parameter, etc. with no change. I'd like to be able to
authenticate users if possible, but still provide guest printing to laptop
users. I've pasted a sanitized version of my smb.conf file below. What am I
overlooking?
Thanks,
Dan Willis
# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2004/12/19 23:29:05
# Global parameters [global]
workgroup = DOMAINNAME
server string = Print server
security = DOMAIN
auth methods = guest, sam, winbind
allow trusted domains = No
min password length = 6
map to guest = Bad Password
pam password change = Yes
unix password sync = Yes
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
log level = 2
log file = /var/log/samba/log.%m
acl compatibility = win2k
name resolve order = wins lmhosts host bcast
time server = Yes
paranoid server security = No
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
printcap name = CUPS
domain master = No
dns proxy = No
wins server = IP ADDRESS
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
winbind trusted domains only = Yes
invalid users =
printer admin =
hosts deny =
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
level2 oplocks = No
[homes]
comment = Home Directories
valid users = %D/%U/%S
read only = No
create mask = 0640
directory mask = 0750
browseable = No
[printers]
comment = All Printers
path = /var/tmp
create mask = 0600
guest ok = Yes
printable = Yes
use client driver = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin, root
force group = ntadmin
create mask = 0664
directory mask = 0775
[Lexmark]
comment = Lexmark example printer
path = /var/tmp
printer admin = Mydomain\myusername
read only = No
create mask = 0600
guest ok = Yes
printable = Yes
printer name = Lexmark example printer
use client driver = Yes
oplocks = No
idmap backend =
idmap uid = 1-2
idmap gid = 1-2
template primary group = nobody
template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 300
winbind enable local accounts = No
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = No
winbind trusted domains only = Yes
winbind nested groups = No
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
