I have a Samba PDC running Samba-3.0.23d in a one way trust relationship with a Windows Server 2003 DC such that Samba is the Trusting Domain. Denote the primary (Samba domain) by SAMBA and the trusted Windows domain by WINDOWS. After upgrading to Samba-3.0.25, when WINDOWS users log on interactively to a SAMBA Workstation, they receive a message "Your password expires today. Would you like to change it now ?". This occurs even though passwords are set to never expire on the WINDOWS domain. Reverting back to Samba-3.0.23d prevents the message from appearing. Regards, Patrick
Got it reproduced even with a fresh install. Compiling 3.0.23d now to see what the difference might be. Volker
For me it's fixed with r22819. Please re-open if this does not help for you. Not sure this is going to make it into 3.0.25, this might be an early one for 3.0.25a. It's VERY late in the release process, Jerry is probably already busy building packages. Apologies if you have to wait for 3.0.25a. Thanks a lot for testing it! Volker
HI. I'm running samba 3.0.25 from sernet for centos4 and i'm affected by this bug, always when log in in clients computer (WinXP Prof SP2), which is connected to samba PDC server: "your password expired ..." even if i change password, it's prompting again for changing passwred, when next login occurs. Where can i obtain r22819 ?
Revision 22819 of source/auth/auth_util.c can be obtained here: http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_3_0_25/source/auth/auth_util.c?rev=22819&view=markup The diff is available here: http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_3_0_25/source/auth/auth_util.c?rev=22819&r1=22589&r2=22819 However, this bug is fixed in 3.0.25 Release. See http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_3_0_RELEASE/source/auth/auth_util.c?rev=22822&view=log Regards, Patrick
Hi! I tried to reproduce the specified behaviour with the 3.0.25 rpm from sernet as a PDC and a windows xp sp2 client without success. Please could you create a new logfile with "log level = 10", "debug pid = yes" and "debug hires timestamp = yes" during the connection attempt? Also you could create a client specify logfile adding "%I" to the filename at the "log file" parameter. Thanks for your Feedback! Magnus
The original complaint was against users from a trusted domain. Not against users in the Samba domain. If the lwetter is you case, this should be opened as a new bug.
Someone else has filed a bug against users in a Samba DC (BUG 4630).