Topic: Password changed, but not saved

[smnirosh]

I changed my user password from sme server web panel. But when i log into my computer, the new password is not accepted by windows client. Then I gave the old password, ok  ...... logged.
And the new password is accepted when accessing ibays. what can i do to save this password?

[Stefano]

Are your clients joined to the domain? Is your SME the domain controller for your LAN?
BTW, OT in this forum, moving to SME9.X

[smnirosh]

ciao stefano, Yes clients joined to this smb domain, the server works as server-gateway.
Yes this domain controller for our Lan plus Openvpn to the outside clients.

[Fumetto]

Have you logout and login again?

[smnirosh]

yes from client computer 2 days. changed the password 3 times but not effecting to client loggin

[Daniel B.]

Clients must use a wired connection, on the same lan as SME Server for the new password to take effect (or the must have the correct WINS settings if they are on a different subnet). It won't work if you're using WiFi or OpenVPN (because the connection is not available when the login occures, so the old, cached password is used). You just need to login once using a wired connection to update the cached password, then it'll be used offline.

[Stefano]

my 2c over Daniel post: this is not a SME limitation but a protocol one.. IOW, it's how things would work even if you have a windows server..

[smnirosh]

Yes all requirements are ok. I changed the password only on 2 local network computers. they are conted with wired.

[Stefano]

so, IIUC, you have 2 local wired clients that are using old passwords.. am I right?

question (thinking of you in the past..): is SME the only samba/DC in your lan? I remember you had a nethservice too and you messed a bit things..

which OS are running your clients?

can you try to change password using the Ctrl-alt-canc approach? it should work AFAIK (@Dani and others, correct me if I'm wrong)

[smnirosh]

yes previously we had nethservice with another domain name. then configured a new (physical) serve to sme server 9.
all clients are now connected as new domain name. that happend on october last year. After that incidence, i changed few times the user passwords.

only samba dc in my lan

clients running win7 professional sp1.

I'll try with ctrl-alt-del and let you know. thanks

[smnirosh]

I tried but won't work. gives me error message "compromise the security".

[Stefano]

who gave you the message?

can you please attach here a screenshot?

[smnirosh]

the windows client gave me this error

[Stefano]

well.. it's a bit different, and it seems (from "Accertarsi di poter contattare il server di autenticazione") that your client can't reach SME DC.. so, the next question.. were the clients unjoined from the old DC and then sucessfully rejoined to SME?

if the answer is "yes", you may have hit a bug on windows (see https://forums.contribs.org/index.php/topic,52650.msg271242.html#msg271242)

finally, can you confirm that SME and this client are in the same subnet?

[smnirosh]

Yes these clients are unjoined and rejoined to sme successfully.
yes they are in same subnet.