[OpenIndiana-discuss] passwd command not update smbpasswd file in 151a9

[Udo Grabowski (IMK)]

Too early in the morning... smbpasswd file is Samba, but the
funtionality that the /etc/shadow file is used as password
basis with this entry is valid for Solaris own CIFS service, see
'man smbadm' under 'enable-user' .

For Samba (>3.0.0, if compiled with --with-pam --with-smb_passwd ),
you seemingly can use additional entries like this in /etc/pam.conf
(note the difference: pam_smbpass versus pam_smb_passwd)

other password required pam_smbpass.so use_authtok

samba password required pam_dhkeys.so.1
samba password requisite pam_authtok_get.so.1
samba password requisite pam_authtok_check.so.1
samba password required pam_authtok_store.so.1
samba password required pam_smbpass.so use_authtok
samba session required pam_unix_session.so.1

and in smb.conf file:

   preferred master = yes
   domain master = yes
   local master = yes
   domain logons = yes
   security = user
   obey pam restrictions = yes

You need to set the password after reboot again since
the password hash format changes.

But I don't know if this really works.

Otherwise, you can write a small 'expect' script to
synchronize that users call when changing their password.

On 04/09/2014 09:13, Dang Zhiqiang wrote:
> thank you very much.
>
>
> I'm sorry, passwd command not update smbpasswd file in 151a8 too, fix it like 151a9.
>
> At 2014-09-04 01:37:38, "Udo Grabowski (IMK)" <udo.grabowski at kit.edu> wrote:
>> On 04/09/2014 05:31, Dang Zhiqiang wrote:
>>> passwd command update smbpasswd file in 151a8, but update OS to 151a9 is not, how to fix it?
>>
>> You need this line in /etc/pam.conf:
>> other   password required       pam_smb_passwd.so.1     nowarn
>>
-- 
Dr.Udo Grabowski   Inst.f.Meteorology & Climate Research IMK-ASF-SAT
http://www.imk-asf.kit.edu/english/sat.php
KIT - Karlsruhe Institute of Technology           http://www.kit.edu
Postfach 3640,76021 Karlsruhe,Germany T:(+49)721 608-26026 F:-926026