[K12OSN] smbldap - changing passwords

Rob Owens rowens at ptd.net
Sun Oct 7 19:18:40 UTC 2007


On my Debian Etch system, smbpasswd is runable by regular users.  It also only seems to allow you to specify a username if you are root, so users cannot change the passwords of other users.

-Rob

On Mon, Oct 08, 2007 at 06:23:27AM +1300, Krsnendu dasa wrote:
> smbpasswd is the program, but it is not runable by regular users. Otherwise
> they could change anyone's password. :(
> The concept of the script is to only allow users to change their own
> password, and to do that they have to enter their own current password.
> Your idea of a link seems like a good idea.
> 
> Krsnendu dasa
> 
> On 08/10/2007, Rob Owens <rowens at ptd.net> wrote:
> >
> > Thanks, I found the script you were talking about.  However, if someone
> > could confirm to me that 'smbpasswd' is just as good, then I wouldn't need
> > to bother with the script and with sudoers, etc.
> >
> > But it would be really nice for the Linux password GUI tools to
> > work.  Maybe I could do this:
> > mv /usr/bin/passwd /usr/bin/passwd.bak
> > ln -s /usr/bin/smbpasswd /usr/bin/passwd (or link your script to
> > /usr/bin/passwd)
> >
> > I tried it at the command line and it works, but I haven't tried it on a
> > system with a GUI installed yet...  I wonder if this could cause problems
> > with any future software installations that create a user as part of the
> > install (for instance: backuppc, apache, etc)
> >
> > -Rob
> >
> > On Mon, Oct 08, 2007 at 04:30:17AM +1300, Krsnendu dasa wrote:
> > > It should work with windows clients.
> > > As far as linux users. search the archives. I had a suggestion for a
> > script
> > > that runs smbldap as sudo. It might be a good starting point for you.
> > > The idea of a web interface to change passwords is a good idea mentioned
> > on
> > > the smbldap website, but it seems nothing came of it.
> > >
> > > Krsnendu dasa
> > >
> > > On 08/10/2007, Rob Owens <rowens at ptd.net> wrote:
> > > >
> > > > I ran the smbldap-installer scripts on a Debian Etch machine as a
> > > > test.  Everything seems to have worked fine.  My question is, what is
> > the
> > > > proper method to change passwords (as a non-privileged user).
> > > >
> > > > 'smbpasswd' seems to work.  Is this what I'm supposed to use?  What
> > about
> > > > a linux-only user who is not assigned any samba credentials?
> > > >
> > > > 'passwd' gives me this error after allowing me to enter my new
> > password
> > > > twice:
> > > > LDAP password information update failed: Unknown error
> > > >
> > > > 'ldappasswd' gives me this error immediately:
> > > > ldap_sasl_interactive_bind_s: No such attribute (16)
> > > >
> > > > '/usr/sbin/smbldap-passwd' lets me enter my new password twice, then
> > gives
> > > > me these two errors:
> > > > failed to modify entry: Insufficient access at
> > /usr/sbin/smbldap-passwd
> > > > line 227, <STDIN> line 3.
> > > > Unable to change password: Insufficient access at
> > /usr/sbin/smbldap-passwd
> > > > line 261, <STDIN> line 3.
> > > >
> > > > Also, I don't have any Windows clients to test...  Does changing
> > passwords
> > > > through the Windows password utility work?
> > > >
> > > > Thanks
> > > >
> > > > -Rob
> > > >
> > > > _______________________________________________
> > > > K12OSN mailing list
> > > > K12OSN at redhat.com
> > > > https://www.redhat.com/mailman/listinfo/k12osn
> > > > For more info see <http://www.k12os.org>
> > > >
> >
> > > _______________________________________________
> > > K12OSN mailing list
> > > K12OSN at redhat.com
> > > https://www.redhat.com/mailman/listinfo/k12osn
> > > For more info see <http://www.k12os.org>
> >
> > _______________________________________________
> > K12OSN mailing list
> > K12OSN at redhat.com
> > https://www.redhat.com/mailman/listinfo/k12osn
> > For more info see <http://www.k12os.org>
> >

> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>




More information about the K12OSN mailing list