Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?
2008/2/14, Fabiano Caixeta Duarte <[EMAIL PROTECTED]>: > Jon Theil Nielsen escreveu: > > 2008/2/13, Edmundo Valle Neto <[EMAIL PROTECTED]>: > >> Jon Theil Nielsen escreveu: > >>> I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords > >>> from Windows clients (Ctrl-Alt-Del). > >>> I now have the password chat debug active and I have loglevel 100. > >>> I am not certain about the syntax in the password chat. But if I from > >>> a console try to change the password of a given user (here testuser1), > >>> I see these lines: > >>> > >>> mflserver3# /usr/bin/passwd testuser1 > >>> Changing local password for testuser1 > >>> New Password: (entering the password) > >>> Retype New Password: (entering it again) > >>> > >>> >From that i guess the expression in the chat would be: > >>> *Changing*local*password*for* %u\n *New*Password* %n\n > >>> *Retype*New*Password* %n\n > >>> > >> No. > >> > >> %u is the username and %n is the newpassword. > >> > >> "What*to*expect" > >> %n\n (send the password and a new line) > >> "What*to*expect*then" > >> %n\n (send the password again and a new line) > >> > >> > >>> Selected parts of the log shows: > >>> > >>> [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) > >>> expect: expected [*Changing*local*password*for*] received [Changing > >>> local password for testuser1 > >>> New Password:] match yes > >>> > >> It matched the two first lines stopping at (New Password:) as you have a > >> * at the end. > > > > Okay, I shoulden't have that trailing "*"? > > > >> And wait. > >> > >>> [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) > >>> expect: returning True > >>> [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) > >>> expect: sending [testuser1 > >>> ] > >>> > >> You sent an username to the New password: prompt??? > > > > It wasn't my intention, but I can see that's what happened. > > You seem to have three macros in your passwd chat: %u %u and %n. > Instead, you need %u %n %n. > > See? > > > > > >>> [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476) > >>> read_socket_with_timeout: timeout read. select timed out. > >>> [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) > >>> expect: expected [*New*Password*] received [ > >>> Retype New Password:] match yes > >>> > >> It matched the second line stopping at (Retype New Password:) > >> And wait. > >> > >>> [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) > >>> expect: returning True > >>> [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) > >>> expect: sending [VerySecret > >>> ] > >>> > >> You sent a "VerySecret" password (that obviously will not match the first) > > > > So, that part seemed to work. But obviously not compared to what happened > > above. > > > >>> [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476) > >>> read_socket_with_timeout: timeout read. select timed out. > >>> [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279) > >>> expect: expected [*Retype*New*Password*] received [ > >>> Mismatch; try again, EOF to quit. > >>> New Password:] match no > > > > And again something is completely wrong, I see. > > > > As I said, I am far from confident with the syntax/mecanism here. So I > > would really appreciate some more explicit help. I have tried to > > modify the chat by removing the trailing "*" or by putting the > > expressions into double quotes - but with no luck. > > Again, what is going on in the console is exactely what I wrote above. > > What would then be tbe correct chat? > > > > Regards, > > Jon Theil Nielsen > > Look for my answer in the middle of the above post ;) I give up. My chat was: *Changing*local*password*for* %u\n *New*Password* %n\n *Retype*New*Password* %n\n As I see it, three macro substitutions %u, %n and %n You said above: > "What*to*expect" > %n\n (send the password and a new line) > "What*to*expect*then" > %n\n (send the password again and a new line) Do I not need to include the output from the system (e.g. "Changing local password")? I feel really stupid. I have just tried to adjust the example from the man page to the FreeBSD reality. Maybe I should just sleep on it and try again with some other combinations... But thanks, anyway..! Regards, Jon Theil Nielsen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?
2008/2/14, Bardo Wolf <[EMAIL PROTECTED]>: > Under solaris we had a similar situation (wrong password chat) where the > Jon Theil Nielsen schrieb: > > > I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords > > from Windows clients (Ctrl-Alt-Del). > > I now have the password chat debug active and I have loglevel 100. > > I am not certain about the syntax in the password chat. But if I from > > a console try to change the password of a given user (here testuser1), > > I see these lines: > > > > mflserver3# /usr/bin/passwd testuser1 > > Changing local password for testuser1 > > New Password: (entering the password) > > Retype New Password: (entering it again) > > > >>From that i guess the expression in the chat would be: > > *Changing*local*password*for* %u\n *New*Password* %n\n > > *Retype*New*Password* %n\n > > > > Selected parts of the log shows: > > > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) > > expect: expected [*Changing*local*password*for*] received [Changing > > local password for testuser1 > > New Password:] match yes > > [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) > > expect: returning True > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) > > expect: sending [testuser1 > > ] > > [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476) > > read_socket_with_timeout: timeout read. select timed out. > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) > > expect: expected [*New*Password*] received [ > > Retype New Password:] match yes > > [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) > > expect: returning True > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) > > expect: sending [VerySecret > > ] > > [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476) > > read_socket_with_timeout: timeout read. select timed out. > > [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279) > > expect: expected [*Retype*New*Password*] received [ > > Mismatch; try again, EOF to quit. > > New Password:] match no > > [2008/02/13 17:47:10, 2] smbd/chgpasswd.c:expect(285) > > expect: Unknown error: 0 > > [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:talktochild(316) > > Response 3 incorrect > > [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:chat_with_program(372) > > chat_with_program: Child failed to change password: testuser1 > > [2008/02/13 17:47:10, 3] smbd/sec_ctx.c:pop_sec_ctx(415) > > pop_sec_ctx (1035, 1036) - sec_ctx_stack_ndx = 1 > > [2008/02/13 17:47:10, 5] > rpc_parse/parse_samr.c:init_samr_r_chgpasswd_user(7576) > > init_samr_r_chgpasswd_user > > [2008/02/13 17:47:10, 5] > rpc_server/srv_samr_nt.c:_samr_chgpasswd_user(1581) > > _samr_chgpasswd_user: 1581 > > [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_debug(84) > > 00 samr_io_r_chgpasswd_user > > [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > > status: NT_STATUS_ACCESS_DENIED > > > > As told, I'm not confident with the syntax. Have I made it wrong? Or > > can you see anything else from the log that can pinpoint the problem? > > I would believe that there must be several admins out there who use > > the combination of of Samba and FreeBSD without having these problems. > > > > Cheers, > > Jon Theil Nielsen > > hint from > > http://lists-archives.org/samba/34236-passwd-change-with-3-0-27a.html > > 'Adding "pam password change = yes" worked around the problem for me.' > > solved the problem for us also > > Bardo I guess you are rigth regarding Solaris (which I don't now much about). PAM may also be an option in FreeBSD, but it is not very integrated. Therefore I'm glad I found the solution as deskribed. Regards, Jon Theil Nielsen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?
Under solaris we had a similar situation (wrong password chat) where the hint from http://lists-archives.org/samba/34236-passwd-change-with-3-0-27a.html 'Adding "pam password change = yes" worked around the problem for me.' solved the problem for us also Bardo Jon Theil Nielsen schrieb: > I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords > from Windows clients (Ctrl-Alt-Del). > I now have the password chat debug active and I have loglevel 100. > I am not certain about the syntax in the password chat. But if I from > a console try to change the password of a given user (here testuser1), > I see these lines: > > mflserver3# /usr/bin/passwd testuser1 > Changing local password for testuser1 > New Password: (entering the password) > Retype New Password: (entering it again) > >>From that i guess the expression in the chat would be: > *Changing*local*password*for* %u\n *New*Password* %n\n > *Retype*New*Password* %n\n > > Selected parts of the log shows: > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) > expect: expected [*Changing*local*password*for*] received [Changing > local password for testuser1 > New Password:] match yes > [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) > expect: returning True > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) > expect: sending [testuser1 > ] > [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476) > read_socket_with_timeout: timeout read. select timed out. > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) > expect: expected [*New*Password*] received [ > Retype New Password:] match yes > [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) > expect: returning True > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) > expect: sending [VerySecret > ] > [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476) > read_socket_with_timeout: timeout read. select timed out. > [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279) > expect: expected [*Retype*New*Password*] received [ > Mismatch; try again, EOF to quit. > New Password:] match no > [2008/02/13 17:47:10, 2] smbd/chgpasswd.c:expect(285) > expect: Unknown error: 0 > [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:talktochild(316) > Response 3 incorrect > [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:chat_with_program(372) > chat_with_program: Child failed to change password: testuser1 > [2008/02/13 17:47:10, 3] smbd/sec_ctx.c:pop_sec_ctx(415) > pop_sec_ctx (1035, 1036) - sec_ctx_stack_ndx = 1 > [2008/02/13 17:47:10, 5] > rpc_parse/parse_samr.c:init_samr_r_chgpasswd_user(7576) > init_samr_r_chgpasswd_user > [2008/02/13 17:47:10, 5] rpc_server/srv_samr_nt.c:_samr_chgpasswd_user(1581) > _samr_chgpasswd_user: 1581 > [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_debug(84) > 00 samr_io_r_chgpasswd_user > [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > status: NT_STATUS_ACCESS_DENIED > > As told, I'm not confident with the syntax. Have I made it wrong? Or > can you see anything else from the log that can pinpoint the problem? > I would believe that there must be several admins out there who use > the combination of of Samba and FreeBSD without having these problems. > > Cheers, > Jon Theil Nielsen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?
Jon Theil Nielsen escreveu: 2008/2/13, Edmundo Valle Neto <[EMAIL PROTECTED]>: Jon Theil Nielsen escreveu: I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords from Windows clients (Ctrl-Alt-Del). I now have the password chat debug active and I have loglevel 100. I am not certain about the syntax in the password chat. But if I from a console try to change the password of a given user (here testuser1), I see these lines: mflserver3# /usr/bin/passwd testuser1 Changing local password for testuser1 New Password: (entering the password) Retype New Password: (entering it again) >From that i guess the expression in the chat would be: *Changing*local*password*for* %u\n *New*Password* %n\n *Retype*New*Password* %n\n (...) And again something is completely wrong, I see. As I said, I am far from confident with the syntax/mecanism here. So I would really appreciate some more explicit help. I have tried to modify the chat by removing the trailing "*" or by putting the expressions into double quotes - but with no luck. Again, what is going on in the console is exactely what I wrote above. What would then be tbe correct chat? Regards, Jon Theil Nielsen Your problem is not the trailing *, you can't use %u. Its just strings with wildcards, "WATCH THIS" send this "WATCH THIS" send this. I think that even if you do that "C*:" it works as you have only one C and only one : before the first iteration. It matches anything in the middle, Cblablablablablablablab\nlablabla blablablabla: passwd chat = "Changing local password for*\nNew Password*" %n\n "*Retype New Password*" %n\n Have you ever used regular expressions? This is a hundred times simpler :) Its a sintax based on a unix program called "expect" that is used in automation. It feeds command line programs that doesn't accept options. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?
Oops, that was truncated a bit to much. But I hope you understand. I must be tired. Regards, Jon Theil Nielsen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?
2008/2/13, Edmundo Valle Neto <[EMAIL PROTECTED]>: > Jon Theil Nielsen escreveu: > > I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords > > from Windows clients (Ctrl-Alt-Del). > > I now have the password chat debug active and I have loglevel 100. > > I am not certain about the syntax in the password chat. But if I from > > a console try to change the password of a given user (here testuser1), > > I see these lines: > > > > mflserver3# /usr/bin/passwd testuser1 > > Changing local password for testuser1 > > New Password: (entering the password) > > Retype New Password: (entering it again) > > > > >From that i guess the expression in the chat would be: > > *Changing*local*password*for* %u\n *New*Password* %n\n > > *Retype*New*Password* %n\n > > > > No. > > %u is the username and %n is the newpassword. > > "What*to*expect" > %n\n (send the password and a new line) > "What*to*expect*then" > %n\n (send the password again and a new line) > > > > Selected parts of the log shows: > > > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) > > expect: expected [*Changing*local*password*for*] received [Changing > > local password for testuser1 > > New Password:] match yes > > > > It matched the two first lines stopping at (New Password:) as you have a > * at the end. Okay, I shoulden't have that trailing "*"? > And wait. > > > [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) > > expect: returning True > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) > > expect: sending [testuser1 > > ] > > > > You sent an username to the New password: prompt??? It wasn't my intention, but I can see that's what happened. > > [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476) > > read_socket_with_timeout: timeout read. select timed out. > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) > > expect: expected [*New*Password*] received [ > > Retype New Password:] match yes > > > > It matched the second line stopping at (Retype New Password:) > And wait. > > > [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) > > expect: returning True > > [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) > > expect: sending [VerySecret > > ] > > > > You sent a "VerySecret" password (that obviously will not match the first) So, that part seemed to work. But obviously not compared to what happened above. > > [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476) > > read_socket_with_timeout: timeout read. select timed out. > > [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279) > > expect: expected [*Retype*New*Password*] received [ > > Mismatch; try again, EOF to quit. > > New Password:] match no And again something is completely wrong, I see. As I said, I am far from confident with the syntax/mecanism here. So I would really appreciate some more explicit help. I have tried to modify the chat by removing the trailing "*" or by putting the expressions into double quotes - but with no luck. Again, what is going on in the console is exactely what I wrote above. What would then be tbe correct chat? Regards, Jon Theil Nielsen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?
Jon Theil Nielsen escreveu: I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords from Windows clients (Ctrl-Alt-Del). I now have the password chat debug active and I have loglevel 100. I am not certain about the syntax in the password chat. But if I from a console try to change the password of a given user (here testuser1), I see these lines: mflserver3# /usr/bin/passwd testuser1 Changing local password for testuser1 New Password: (entering the password) Retype New Password: (entering it again) >From that i guess the expression in the chat would be: *Changing*local*password*for* %u\n *New*Password* %n\n *Retype*New*Password* %n\n No. %u is the username and %n is the newpassword. "What*to*expect" %n\n (send the password and a new line) "What*to*expect*then" %n\n (send the password again and a new line) Selected parts of the log shows: [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) expect: expected [*Changing*local*password*for*] received [Changing local password for testuser1 New Password:] match yes It matched the two first lines stopping at (New Password:) as you have a * at the end. And wait. [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) expect: returning True [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) expect: sending [testuser1 ] You sent an username to the New password: prompt??? [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476) read_socket_with_timeout: timeout read. select timed out. [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) expect: expected [*New*Password*] received [ Retype New Password:] match yes It matched the second line stopping at (Retype New Password:) And wait. [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) expect: returning True [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) expect: sending [VerySecret ] You sent a "VerySecret" password (that obviously will not match the first) [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476) read_socket_with_timeout: timeout read. select timed out. [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279) expect: expected [*Retype*New*Password*] received [ Mismatch; try again, EOF to quit. New Password:] match no Mismatch. Try again. (your chat doesn't expected that this will happens and don't have more expressions to match. [2008/02/13 17:47:10, 2] smbd/chgpasswd.c:expect(285) expect: Unknown error: 0 Error. [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:talktochild(316) Response 3 incorrect [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:chat_with_program(372) chat_with_program: Child failed to change password: testuser1 [2008/02/13 17:47:10, 3] smbd/sec_ctx.c:pop_sec_ctx(415) pop_sec_ctx (1035, 1036) - sec_ctx_stack_ndx = 1 [2008/02/13 17:47:10, 5] rpc_parse/parse_samr.c:init_samr_r_chgpasswd_user(7576) init_samr_r_chgpasswd_user [2008/02/13 17:47:10, 5] rpc_server/srv_samr_nt.c:_samr_chgpasswd_user(1581) _samr_chgpasswd_user: 1581 [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_debug(84) 00 samr_io_r_chgpasswd_user [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) status: NT_STATUS_ACCESS_DENIED And so on. As told, I'm not confident with the syntax. Have I made it wrong? Or can you see anything else from the log that can pinpoint the problem? I would believe that there must be several admins out there who use the combination of of Samba and FreeBSD without having these problems. Cheers, Jon Theil Nielsen Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] FreeBSD: Changing UNIX password - Password Chat?
I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords from Windows clients (Ctrl-Alt-Del). I now have the password chat debug active and I have loglevel 100. I am not certain about the syntax in the password chat. But if I from a console try to change the password of a given user (here testuser1), I see these lines: mflserver3# /usr/bin/passwd testuser1 Changing local password for testuser1 New Password: (entering the password) Retype New Password: (entering it again) >From that i guess the expression in the chat would be: *Changing*local*password*for* %u\n *New*Password* %n\n *Retype*New*Password* %n\n Selected parts of the log shows: [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) expect: expected [*Changing*local*password*for*] received [Changing local password for testuser1 New Password:] match yes [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) expect: returning True [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) expect: sending [testuser1 ] [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476) read_socket_with_timeout: timeout read. select timed out. [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279) expect: expected [*New*Password*] received [ Retype New Password:] match yes [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290) expect: returning True [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242) expect: sending [VerySecret ] [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476) read_socket_with_timeout: timeout read. select timed out. [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279) expect: expected [*Retype*New*Password*] received [ Mismatch; try again, EOF to quit. New Password:] match no [2008/02/13 17:47:10, 2] smbd/chgpasswd.c:expect(285) expect: Unknown error: 0 [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:talktochild(316) Response 3 incorrect [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:chat_with_program(372) chat_with_program: Child failed to change password: testuser1 [2008/02/13 17:47:10, 3] smbd/sec_ctx.c:pop_sec_ctx(415) pop_sec_ctx (1035, 1036) - sec_ctx_stack_ndx = 1 [2008/02/13 17:47:10, 5] rpc_parse/parse_samr.c:init_samr_r_chgpasswd_user(7576) init_samr_r_chgpasswd_user [2008/02/13 17:47:10, 5] rpc_server/srv_samr_nt.c:_samr_chgpasswd_user(1581) _samr_chgpasswd_user: 1581 [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_debug(84) 00 samr_io_r_chgpasswd_user [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) status: NT_STATUS_ACCESS_DENIED As told, I'm not confident with the syntax. Have I made it wrong? Or can you see anything else from the log that can pinpoint the problem? I would believe that there must be several admins out there who use the combination of of Samba and FreeBSD without having these problems. Cheers, Jon Theil Nielsen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba