Emmm, well, this makes samba update userPassword when changing the
password from Windows. But if i change the password from Linux, samba
passwords are not updated, because linux machines are autheticating
directly with LDAP, not with Samba (just userPassword).<br>
<br>I have found this message (in 2006), about the same, but without
concrete solution.<br><br><a href="http://www.redhat.com/archives/fedora-directory-devel/2006-May/msg00000.html">http://www.redhat.com/archives/fedora-directory-devel/2006-May/msg00000.html</a><br><br>Regards.<br><br><br>
<div class="gmail_quote">El 21 de junio de 2010 14:19, Miguel Medalha <span dir="ltr"><<a href="mailto:miguelmedalha@sapo.pt">miguelmedalha@sapo.pt</a>></span> escribió:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im"><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Is 389DS able to compute sambaLMPassword and sambaNTPassword automatically when userPassword is updated? Is there any pugin? If not, which plugin is the best to take as base to do this?<br>
</blockquote>
<br></div>
There is a parameter in smb.conf:<br>
<br>
"ldap passwd sync = Yes"<br>
<br>
Doesn't it work for you?<br>
<br>
Or maybe you are referring to<br>
<br>
"ldap passwd sync = Only"<br>
<br>
<br>
>From the smb.conf man page:<br>
<br>
-----------------------<br>
ldap passwd sync (G)<br>
This option is used to define whether or not Samba should sync the LDAP password with the NT and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password change via SAMBA.<br>
<br>
The ldap passwd sync can be set to one of three values:<br>
<br>
Yes = Try to update the LDAP, NT and LM passwords and update the pwdLastSet time.<br>
<br>
No = Update NT and LM passwords and update the pwdLastSet time.<br>
<br>
Only = Only update the LDAP password and let the LDAP server do the rest.<br>
<br>
Default: ldap passwd sync = no<br>
-----------------------<br>
<br>
</blockquote></div><br>