Hi,

I have never really used this setting before on my Samba server, I change samba users passwords locally on the server when I need to. I do know that by entering the following, a user can change his/her password from a Windows machine connected to the domain.

unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Please*retype*new*password* %n\n *password*successfully*updated*

First, what does a user need to do in Windows to change the password?

I am guessing that the first line means the samba password is the same as the password for the local user account on the server. What if I don't want to allow a user to log onto the server locally, but still want him/her to be able to change their Samba password? Is there anyway to do this? I don't really want to create a local password for the user, and then disable the account locally. I'd rather create a local account, not give it a local password (so it can't logon that way) and then just give it a samba password, and then allow it to be changed remotely via a Samba connection. Am I asking too much?

In /etc/passwd make their shell "/bin/false" its at the end of all the lines in /etc/passwd


--tarballedtux