Bug 8843 - User can not change own password (samr_ChangePasswordUser3)
Summary: User can not change own password (samr_ChangePasswordUser3)
Alias: None
Product: Samba 4.0
Classification: Unclassified
Component: DCE-RPCs and pipes (show other bugs)
Version: unspecified
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: samba4-qa@samba.org
Depends on:
Reported: 2012-04-05 09:29 UTC by Björn Baumbach
Modified: 2012-04-06 13:52 UTC (History)
0 users

See Also:

selfttest for user password change (1.35 KB, patch)
2012-04-05 09:29 UTC, Björn Baumbach
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Björn Baumbach 2012-04-05 09:29:13 UTC
Created attachment 7425 [details]
selfttest for user password change

User on Windows 7 Client can not change his own password.
samba-tool user password -Uuser%verYc0mpleXPW --newpassword="newverYc0mpleXPW" does the same.

ERROR: Failed to change password : samr_ChangePasswordUser3 for 'SAMBADOMAIN\\sambatool1' failed: NT_STATUS_PASSWORD_RESTRICTION

I attached a patch for the samba_tool selftest which triggers the problem.
Wasn't able to test the patch, since password changes do not work atm ;-)

git HEAD is on 48166468fe3ca515dae3431bbe674809489f743c
Comment 1 Matthias Dieter Wallnöfer 2012-04-06 12:35:48 UTC
That is not a real bug: look at "samdb_check_password()" - "check_password_quality()" seems not to be satisfied.
Comment 2 Matthias Dieter Wallnöfer 2012-04-06 12:40:09 UTC
Or there is also the minimum password age which has to be satisfied ecc...
Please try to disable the various password complexity settings - the password changes should work then.
Comment 3 Björn Baumbach 2012-04-06 13:52:55 UTC
You are right! Sorry for confusion.
It is the minimum password age, with the default value of one day.

But some weeks ago (I'm nearly sure) I was able to change the user password with the default password settings several times (without waiting one day ;-) ).