RE: [Samba] You do not have permission to change your password

2004-04-22 Thread Brandon Turner
Just an update.  After reading others posts, I uninstalled Microsoft
Cumulative Update MS04-012 (KB828741).  Sure enough this fixed the
problem.  Hope Samba folks can correct this in Samba 3.0.3 so we don't
have to uninstall this update on all computers.

Brandon


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Brandon Turner
Sent: Sunday, April 18, 2004 2:09 PM
To: [EMAIL PROTECTED]
Subject: [Samba] You do not have permission to change your password

We recently migrated from WindowsNT to Samba 3.0.2a.  After about two
months, we have started to notice a weird problem.  As user's passwords
expire, they are prompted to change them.  When they attempt to do so
from Windows, they get a message saying You do not have permission to
change your password.  However, the password IS changed.  Both the
Samba and LDAP Linux passwords are changed correctly, as well as the
samba attributes (such as sambaPasswordLastSet, etc.)  Sometimes we
notice the following entry in our Samba logs:

 

[2004/04/17 18:13:26, 0] smbd/chgpasswd.c:check_oem_password(832)

  check_oem_password: incorrect password length (-800397408).

 

However sometimes this message does not appear.  When we first installed
Samba, we forced users to change their passwords from Windows and this
worked fine.  However, now 2 months later as their passwords are
beginning to expire, this error is occurring for ALL users.  The
password is ALWAYS changed however, so I am totally lost as to what is
going on.  We have not changed any settings (that we know of) since when
password changing was working and when it stopped.

 

I've seen a lot of posts in the past about the error message we are
receiving, however nothing substantial.  The password DOES change, so if
the packet is being decrypted wrong (the common error of several posts)
then how does Samba know what the new password is.

 

If you have any idea what is going on, please help.

 

Brandon Turner

MSC Computer Operations

Texas AM University

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] You do not have permission to change your password

2004-04-22 Thread Andrew Bartlett
On Fri, 2004-04-23 at 07:14, Brandon Turner wrote:
 Just an update.  After reading others posts, I uninstalled Microsoft
 Cumulative Update MS04-012 (KB828741).  Sure enough this fixed the
 problem.  Hope Samba folks can correct this in Samba 3.0.3 so we don't
 have to uninstall this update on all computers.

Can you try 3.0.3rc1?

I made changes to ensure we do not use the LM password during the
change, which might solve this issue.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] You do not have permission to change your password

2004-04-22 Thread Brandon Turner
Nope, even with 3.0.3rc1 it still did the error.  Passwords were changed
correctly just like before.  I did notice once that it would let me log
in with either my original password, or the password I just changed to.
This stopped after rebooting the Windows client, but still weird.

I also get the DOMAIN not available message sometimes, or the You
don't have permission others.

Brandon



-Original Message-
From: Andrew Bartlett [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 22, 2004 6:35 PM
To: Brandon Turner
Cc: [EMAIL PROTECTED]
Subject: RE: [Samba] You do not have permission to change your password

On Fri, 2004-04-23 at 07:14, Brandon Turner wrote:
 Just an update.  After reading others posts, I uninstalled Microsoft
 Cumulative Update MS04-012 (KB828741).  Sure enough this fixed the
 problem.  Hope Samba folks can correct this in Samba 3.0.3 so we don't
 have to uninstall this update on all computers.

Can you try 3.0.3rc1?

I made changes to ensure we do not use the LM password during the
change, which might solve this issue.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba