On Fri, Aug 06, 2004 at 10:43:16AM -0500, Nathan Kroll wrote: > > We have a script on our webmail that allows users to change their > > email/nt passwords. We used to be using NT 4/5 and just recently > > upgraded our PDC to Windows server 2003. Since then, smbauth doesn't > > work. When run on the command line with the correct password it > > states: > > Could not connect to server: NT_STATUS_ACCESS_DENIED > > > > With the wrong password: > > Could not connect to server: NT_STATUS_LOGON_FAILURE > > > > The command I'm using for smbauth is: smbauth -d our_domain -s > > our_AD_box -u my_user > > > > The weird thing is that is returns different things if the > > incorrect/correct password is used. Also, we use smbpasswd to change > > the password. That works to change the NT password, but you can use > > both passwords (your new one and last one) for about 15 minutes until > > the servers sync? > > > > We are using the latest samba-client from debian unstable and > > connecting to various NT 4/5 or Server 2003 boxes. The NT 4/5 > > authentication still works just fine. > > > > Thanks for any help. > > > > Does anyone have any ideas?
I suspect that Win 2K3 is using ADS (Active Directory Services) in which case you should be trying the pam_ldap with nss_ldap approach. Just a guess though. I have "heard" that Samba 3+ has very good ADS support. HTH, Didar -- I have a VISION! It's a RANCID double-FISHWICH on an ENRICHED BUN!! Random signature generated by Signify v1.07 http://www.debian.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]