I attempt to change my password from windows (ctrl-alt-delete), and it gives me 
the standard error "The system cannot change your password now because domain 
DOMAIN is not available".  However, the change does go through for both samba 
(using tdbsam backend) as well as Solaris (using /bin/passwd %u, samba server 
is NIS master).  I am fairly certain my "passwd chat" is correct, however was 
not able to get "passwd chat debug = yes" to work.  "unix password sync = yes" 
as well...

Output of log.smb when I hit 'OK' to change password: (moe is client machine, 
domain = DOMAIN, user = russj) -- this looks bad, but actually DOES work - just 
doesn't let windows user know that it worked.

[2004/05/09 22:42:42, 0] smbd/chgpasswd.c:check_oem_password(832)
  check_oem_password: incorrect password length (1319199709).
[2004/05/09 22:42:42, 1] rpc_server/srv_pipe.c:api_pipe_ntlmssp_verify(414)
  api_pipe_ntlmssp_verify: User [DOMAIN]\[russj] from machine MOE failed authent
ication on named pipe samr.
[2004/05/09 22:42:42, 0] smbd/chgpasswd.c:check_oem_password(832)
  check_oem_password: incorrect password length (1319199709).
[2004/05/09 22:42:45, 1] rpc_server/srv_pipe.c:api_pipe_ntlmssp_verify(414)
  api_pipe_ntlmssp_verify: User [DOMAIN]\[russj] from machine MOE failed authent
ication on named pipe samr.
[2004/05/09 22:42:45, 0] smbd/chgpasswd.c:check_oem_password(832)
  check_oem_password: incorrect password length (1319199709).
[2004/05/09 22:42:45, 1] rpc_server/srv_pipe.c:api_pipe_ntlmssp_verify(414)
  api_pipe_ntlmssp_verify: User [DOMAIN]\[russj] from machine MOE failed authent
ication on named pipe samr.
[2004/05/09 22:42:45, 0] smbd/chgpasswd.c:check_oem_password(832)
  check_oem_password: incorrect password length (1319199709).