Operating System - HP-UX
1833873 Members
2953 Online
110063 Solutions
New Discussion

Samba password change issue for users via swat

 
SOLVED
Go to solution
support_5
Super Advisor

Samba password change issue for users via swat

Dear all,

Our install of Samba 2.2.5 is working fine as a PDC on our HPUX 11.00 server except when users go to change their passwords via swat they get the error:

"machine 127.0.0.1 rejected the tconX on the IPC$ share. Error was : NT_STATUS_WRONG_PASSWORD.


The passwd for '' has NOT been changed."

A fix for version 2.0.6 for the same problem recommended changing the details for the nobody user:

"machine 127.0.0.1 rejected the tconX on the IPC$ share. Error was : ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.).
Failed to change password for rjamieso
This is because of the way the "nobody" ID is setup under HP-UX.
/etc/passwd: nobody:*:-2:-2::/:
/etc/group: group "nobody" does not exist !
To fix, create group nobody, eg: "nobody::60001:
Use "vipw" (SAM wont let you do this) to edit /etc/passwd to read:
nobody2:*:-2:-2:original nobody user was no good for samba:/:
nobody:*:60001:60001:original nobody user was no good for samba:/:
NOTE: !!! - I'm not sure what side-effects this will have, but I think it will be OK."

The source for this solution is:

http://www.scsuk.net/samba.html

It sounds a bit radical. Anyone got ideas.

Cheers,

Damo
3 REPLIES 3
Ross Zubritski
Trusted Contributor
Solution

Re: Samba password change issue for users via swat

Ross Zubritski
Trusted Contributor

Re: Samba password change issue for users via swat

Damo,

Try setting your passwd chat parameter to:

passwd chat = *new*password* %n\n *new*password* %n\n *success*

Users should be able to change their own passwords.

Regards,

RZ
support_5
Super Advisor

Re: Samba password change issue for users via swat

Dear Ross,

Your right with the first anwer but I had no luck with the second.

Regarding answer 1:

I added the default guest user "smbnull" to the valid users list and it works like a charm.

Regarding answer 2:

This change does not have the desired effect.

Thanks for you tremendous help.

Cheers,

Damo