Operating System - HP-UX
1834645 Members
1998 Online
110069 Solutions
New Discussion

Samba and NIS password expiry

 
Steve Nash_1
New Member

Samba and NIS password expiry

Hi,

I have successfully configured Samba (version 2.2.8a on 11.00), with the unix password sync option. From the clients, users can change their UNIX and Samba passwords at the same time.

The problem I am having is dealing with the UNIX password expiry feature. On expiration of their account, the clients are accessing the server using the 'rlogin' command, but this instantly uses the 'yppasswd' command, rather than the 'smbpasswd' command.

The synchronisation of passwords is therefore lost.

Any ideas ?

Thanks in anticipation

Steve


3 REPLIES 3
Steve Steel
Honored Contributor

Re: Samba and NIS password expiry

Hi


Password synchronization between Windows Server and Unix servers. This is a one-way synchronization device, from Windows to Unix.

You need to stop people logging in outside of cifs to do passwords

Look at inetd.sec or similar

Steve Steel
If you want truly to understand something, try to change it. (Kurt Lewin)
Steven E. Protter
Exalted Contributor

Re: Samba and NIS password expiry

in smb.conf

seucrity=user

This makes the CIFS/Samba process completely unaware of the expiration of password on the windows environment.

To get the user set up the command smbpasswd -a username password

had to be issued.

security=server

with addition prepartions to make sure their is communication needs to be implemented.

Then Samba access will be controlled by whaterver machine is providing network authentication, in this case apparently and NIS server.

There is documentation on how to do this in the website http://www.samba.org

Equivalent documentation exists at http://docs.hp.com

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Steve Nash_1
New Member

Re: Samba and NIS password expiry

Thanks for the comments, but I think I may not have explained the problem correctly.

The synchronisation is nothing to do with Windows, but between the smbpasswd file and the /etc/passwd file held on the NIS Master.

The expiry is happening from the NIS side not from the Windows side.

Is there a way for example to get the login process to use smbpasswd rather than /usr/bin/passwd ?

Thanks