From 3bb3f2d0ce1165d0cac683f507d838d20c8c743b Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Sat, 14 Nov 1998 03:01:40 +0000 Subject: Update for 2.0beta1. Jeremy. (This used to be commit 598d0255d40da29ebab3d1a3c9eb66ba654db7b5) --- docs/htmldocs/smbpasswd.8.html | 36 ++++++++++++++++++++---------------- 1 file changed, 20 insertions(+), 16 deletions(-) (limited to 'docs/htmldocs/smbpasswd.8.html') diff --git a/docs/htmldocs/smbpasswd.8.html b/docs/htmldocs/smbpasswd.8.html index 066004be21..6bfd8cdb44 100644 --- a/docs/htmldocs/smbpasswd.8.html +++ b/docs/htmldocs/smbpasswd.8.html @@ -3,7 +3,7 @@ -smbpasswd +smbpasswd (8) @@ -11,7 +11,7 @@
-

smbpasswd

+

smbpasswd (8)

Samba

23 Oct 1998

@@ -35,7 +35,7 @@ user it allows the user to change the password used for their SMB sessions on any machines that store SMB passwords.


By default (when run with no arguments) it will attempt to change the current users SMB password on the local machine. This is similar to -the way the passwd (1) program works. smbpasswd differs from +the way the passwd (1) program works. smbpasswd differs from how the passwd program works however in that it is not setuid root but works in a client-server mode and communicates with a locally running smbd. As a consequence in order for this @@ -49,13 +49,13 @@ correctly. No passwords will be echoed on the screen whilst being typed. If you have a blank smb password (specified by the string "NO PASSWORD" in the smbpasswd file) then just press the <Enter> key when asked for your old password. -


smbpasswd also can be used by a normal user to change their SMB +


smbpasswd can also be used by a normal user to change their SMB password on remote machines, such as Windows NT Primary Domain Controllers. See the (-r) and -U options below.


When run by root, smbpasswd allows new users to be added and deleted in the smbpasswd file, as well as -changes to the attributes of the user in this file to be made. When +allows changes to the attributes of the user in this file to be made. When run by root, smbpasswd accesses the local smbpasswd file directly, thus enabling changes to be made even if smbd is not running. @@ -69,8 +69,8 @@ be added to the local smbpasswd the new password typed (type <Enter> for the old password). This option is ignored if the username following already exists in the smbpasswd file and it is treated like a -regular change password command. Note that the user to be added .B -must already exist in the system password file (usually /etc/passwd) +regular change password command. Note that the user to be added +must already exist in the system password file (usually /etc/passwd) else the request to add the user will fail.


This option is only available when running smbpasswd as root. @@ -142,6 +142,9 @@ username. specified must be the Primary Domain Controller for the domain (Backup Domain Controllers only have a read-only copy of the user account database and will not allow the password change). +


Note that Windows 95/98 do not have a real password database +so it is not possible to change passwords specifying a Win95/98 +machine as remote machine target.


  • -R name resolve order This option allows the user of smbclient to determine what name resolution services to use when @@ -155,11 +158,12 @@ resolved as follows :


  • host : Do a standard host name to IP address resolution, using the system /etc/hosts, NIS, or DNS lookups. This method of name -resolution is operating system depended for instance on IRIX or -Solaris this may be controlled by the /etc/nsswitch.conf file). +resolution is operating system dependent. For instance on IRIX or +Solaris, this may be controlled by the /etc/nsswitch.conf file).


    -

  • wins : Query a name with the IP address listed in the wins -server parameter in the smb.conf file. If +
  • wins : Query a name with the IP address listed in the +wins server parameter in the +smb.conf file. If no WINS server has been specified this method will be ignored.


  • bcast : Do a broadcast on each of the known local interfaces @@ -168,7 +172,7 @@ in the smb.conf file. This is the least reliable of the name resolution methods as it depends on the target host being on a locally connected subnet.


    -


    If this parameter is not set then the name resolver order defined +


    If this parameter is not set then the name resolve order defined in the smb.conf file parameter name resolve order will be used. @@ -202,7 +206,7 @@ Controller for the Domain (found in the the machine account password used to create the secure Domain communication. This password is then stored by smbpasswd in a file, read only by root, called <Domain>.<Machine>.mac where -<Domain> is the name of the Domain we are joining and tt<Machine> +<Domain> is the name of the Domain we are joining and <Machine> is the primary NetBIOS name of the machine we are running on.


    Once this operation has been performed the smb.conf file may be updated to set the @@ -224,19 +228,19 @@ different systems to change these passwords.

  • -h This option prints the help string for smbpasswd, selecting the correct one for running as root or as an ordinary user.


    -

  • -s This option causes smbpasswd to be silent (ie. not +
  • -s This option causes smbpasswd to be silent (i.e. not issue prompts) and to read it's old and new passwords from standard input, rather than from /dev/tty (like the passwd (1) program does). This option is to aid people writing scripts to drive smbpasswd


    -dir(username) This specifies the username for all of the root +

  • username This specifies the username for all of the root only options to operate on. Only root can specify this parameter as only root has the permission needed to modify attributes directly in the local smbpasswd file.


    NOTES

    -


    As smbpasswd works in client-server mode communicating with a +


    Since smbpasswd works in client-server mode communicating with a local smbd for a non-root user then the smbd daemon must be running for this to work. A common problem is to add a restriction to the hosts that may access the smbd running on the -- cgit