ldap passwd sync old password

View: New views
2 Messages — Rating Filter:   Alert me  

ldap passwd sync old password

by Volker Jordan :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

I want, that the unix password ( stored on LDAP ) gets changed when a
user changes his samba password ( stored on LDAP ).
So I set ldap passwd sync = yes, but the unix password does not get
changed. The samba password is updated.

Smbpasswd shows this error

machine 127.0.0.1 rejected the (anonymous) password change: Error was :
Wrong Password.
Failed to change password for user1.

After looked at all samba logs, but nothing told me whats wrong.
Finally I looked at the error log of the LDAP server and here is the
error:

Password change not allowed. Old password value must be supplied.

So how can I fix this?

Samba 3.0.28 / Solaris 10 / Sun Java Directory Server

Regards

Volker Jordan


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: ldap passwd sync old password

by Gaiseric Vandal :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I had the same situation (Solaris 10, Sun Dir Server, Samba 3.0.33.)    
I wrote an external script to change the password.  Make sure the script
is owned by root and with perms 600 or 700 since it needs the LDAP super
user's password.

#vi smb.conf
...
unix password sync = yes
passwd program = /etc/samba/smbldappasswd.sh %u
ldap passwd sync = no
...



#vi /etc/samba/smbldappasswd.sh

#!/bin/bash
USER="uid="$1",ou=people,o=domain.com"
echo -n  New password:
read NEWPASS
date >> /etc/samba/smbldappasswd.log
echo $USER >> /etc/samba/smbldappasswd.log
echo $NEWPASS >> /etc/samba/smbldappasswd.log
/opt/SUNWdsee/dsee6/bin/ldappasswd -h obelix -D "cn=Directory Manager"
-w ***  -v -s $NEWPASS  $USER








On 11/03/09 03:44, Volker Jordan wrote:

> Hi,
>
> I want, that the unix password ( stored on LDAP ) gets changed when a
> user changes his samba password ( stored on LDAP ).
> So I set ldap passwd sync = yes, but the unix password does not get
> changed. The samba password is updated.
>
> Smbpasswd shows this error
>
> machine 127.0.0.1 rejected the (anonymous) password change: Error was :
> Wrong Password.
> Failed to change password for user1.
>
> After looked at all samba logs, but nothing told me whats wrong.
> Finally I looked at the error log of the LDAP server and here is the
> error:
>
> Password change not allowed. Old password value must be supplied.
>
> So how can I fix this?
>
> Samba 3.0.28 / Solaris 10 / Sun Java Directory Server
>
> Regards
>
> Volker Jordan
>
>
>    

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba