[K12OSN] smbldap - changing passwords

[Rob Owens]

Yeah, I tried smbldap-passwd and as you say, it's only runable by root.
 But smbpasswd is runable by anyone, and seems to do the job.  I say
"seems to" because I don't know enough yet about ldap and samba to
verify 100% that it works.  However, I tried using it (as a regular
user) to change a password and I was able to log into a Linux machine
using that new password.  I don't have any Windows clients to test, though.

-Rob

Krsnendu dasa wrote:
> that should be smbldap-passwd
> 
> On 08/10/2007, Krsnendu dasa <krsnendu108 at gmail.com> wrote:
>> smbpasswd is the program, but it is not runable by regular users.
>> Otherwise they could change anyone's password. :(
>> The concept of the script is to only allow users to change their own
>> password, and to do that they have to enter their own current password.
>> Your idea of a link seems like a good idea.
>>
>> Krsnendu dasa
>>
>> On 08/10/2007, Rob Owens <rowens at ptd.net> wrote:
>>> Thanks, I found the script you were talking about.  However, if someone
>>> could confirm to me that 'smbpasswd' is just as good, then I wouldn't need
>>> to bother with the script and with sudoers, etc.
>>>
>>> But it would be really nice for the Linux password GUI tools to
>>> work.  Maybe I could do this:
>>> mv /usr/bin/passwd /usr/bin/passwd.bak
>>> ln -s /usr/bin/smbpasswd /usr/bin/passwd (or link your script to
>>> /usr/bin/passwd)
>>>
>>> I tried it at the command line and it works, but I haven't tried it on a
>>> system with a GUI installed yet...  I wonder if this could cause problems
>>> with any future software installations that create a user as part of the
>>> install (for instance: backuppc, apache, etc)
>>>
>>> -Rob
>>>
>>> On Mon, Oct 08, 2007 at 04:30:17AM +1300, Krsnendu dasa wrote:
>>>> It should work with windows clients.
>>>> As far as linux users. search the archives. I had a suggestion for a
>>> script
>>>> that runs smbldap as sudo. It might be a good starting point for you.
>>>> The idea of a web interface to change passwords is a good idea
>>> mentioned on
>>>> the smbldap website, but it seems nothing came of it.
>>>>
>>>> Krsnendu dasa
>>>>
>>>> On 08/10/2007, Rob Owens < rowens at ptd.net> wrote:
>>>>> I ran the smbldap-installer scripts on a Debian Etch machine as a
>>>>> test.  Everything seems to have worked fine.  My question is, what
>>> is the
>>>>> proper method to change passwords (as a non-privileged user).
>>>>>
>>>>> 'smbpasswd' seems to work.  Is this what I'm supposed to use?  What
>>> about
>>>>> a linux-only user who is not assigned any samba credentials?
>>>>>
>>>>> 'passwd' gives me this error after allowing me to enter my new
>>> password
>>>>> twice:
>>>>> LDAP password information update failed: Unknown error
>>>>>
>>>>> 'ldappasswd' gives me this error immediately:
>>>>> ldap_sasl_interactive_bind_s: No such attribute (16)
>>>>>
>>>>> '/usr/sbin/smbldap-passwd' lets me enter my new password twice, then
>>> gives
>>>>> me these two errors:
>>>>> failed to modify entry: Insufficient access at
>>> /usr/sbin/smbldap-passwd
>>>>> line 227, <STDIN> line 3.
>>>>> Unable to change password: Insufficient access at
>>> /usr/sbin/smbldap-passwd
>>>>> line 261, <STDIN> line 3.
>>>>>
>>>>> Also, I don't have any Windows clients to test...  Does changing
>>> passwords
>>>>> through the Windows password utility work?
>>>>>
>>>>> Thanks
>>>>>
>>>>> -Rob
>>>>>
>>>>> _______________________________________________
>>>>> K12OSN mailing list
>>>>> K12OSN at redhat.com
>>>>> https://www.redhat.com/mailman/listinfo/k12osn
>>>>> For more info see < http://www.k12os.org>
>>>>>
>>>> _______________________________________________
>>>> K12OSN mailing list
>>>> K12OSN at redhat.com
>>>> https://www.redhat.com/mailman/listinfo/k12osn
>>>> For more info see <http://www.k12os.org>
>>> _______________________________________________
>>> K12OSN mailing list
>>> K12OSN at redhat.com
>>> https://www.redhat.com/mailman/listinfo/k12osn
>>> For more info see < http://www.k12os.org>
>>>
>>
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>