smbpasswd

Synopsis

smbpasswd [-a] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-i] [-L] [username]

[-a] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-i] [-L] [username]

DESCRIPTION

This tool is part of the SambaThis tool is part of the Samba(7) suite.

The smbpasswd program has several different - functions, depending on whether it is run by the root - user or not. When run as a normal user it allows the user to change +> user + or not. When run as a normal user it allows the user to change the password used for their SMB sessions on any machines that store SMB passwords.

passwd(1) program works. - program works. smbpasswd smbpasswd differs from how the passwd program works - however in that it is not setuid root but works in - a client-server mode and communicates with a locally running - smbd(8)smbd(8). As a consequence in order for this to succeed the smbd daemon must be running on the local machine. On a UNIX machine the encrypted SMB passwords are usually stored in - the smbpasswd(5)smbpasswd(5) file.

When run by an ordinary user with no options, smbpasswd @@ -91,18 +107,28 @@ CLASS="FILENAME" was typed correctly. No passwords will be echoed on the screen whilst being typed. If you have a blank SMB password (specified by the string "NO PASSWORD" in the smbpasswd file) then just press - the <Enter> key when asked for your old password.

smbpasswd can also be used by a normal user to change their SMB password on remote machines, such as Windows NT Primary Domain - Controllers. See the (-r) and -U options below.

-r) and -U options + below.
When run by root, smbpasswd allows new users to be added and deleted in the smbpasswd file, as well as allows changes to - the attributes of the user in this file to be made. When run by root, - smbpasswd smbpasswd accesses the local smbpasswd file directly, thus enabling changes to be made even if smbd is not running.
OPTIONS
This option specifies that the username following should be added to the local smbpasswd file, with the - new password typed (type <Enter> for the old password). This + new password typed (type <Enter> for the old password). This option is ignored if the username following already exists in the smbpasswd file and it is treated like a regular change password command. Note that the default passdb backends require @@ -169,10 +195,12 @@ CLASS="CONSTANT" >
If the smbpasswd file is in the 'old' format (pre-Samba 2.0 format) there is no space in the user's password entry to write - this information and the command will FAIL. See smbpasswd(5) - smbpasswd(5) for details on the 'old' and new password file formats.
smbpasswd will FAIL to enable the account. - See smbpasswd (5)smbpasswd(5) for details on the 'old' and new password file formats.
Note that Windows 95/98 do not have a real password database so it is not possible to change passwords specifying a Win95/98 machine as remote machine target.
The options are :"lmhosts", "host", "wins" and "bcast". They - cause names to be resolved as follows :
lmhosts : Lookup an IP +>: Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has - no name type attached to the NetBIOS name (see the lmhosts(5)lmhosts(5) for details) then any name type matches for lookup.
host : Do a standard host +>: Do a standard host name to IP address resolution, using the system /etc/hosts @@ -353,7 +389,7 @@ CLASS="FILENAME" >wins : Query a name with +>: Query a name with the IP address listed in the bcast : Do a broadcast on +>: Do a broadcast on each of the known local interfaces listed in the lmhosts, host, wins, bcast - and without this parameter or any entry in the - smb.confsmb.conf(5) file the name resolution methods will be attempted in this order. . Note that the password is stored in the private/secrets.tdbsecrets.tdb and is keyed off of the admin's DN. This means that if the value of This specifies the username for all of the - root only options to operate on. Only root can specify this parameter as only root has the permission needed to modify attributes directly in the local smbpasswd file. @@ -523,7 +564,7 @@ CLASS="EMPHASIS" > NOTES smbd running on the local machine by specifying a - running on the local machine by specifying either allow hostsallow + hosts or deny hosts - entry in the smb.conf entry in + the smb.conf(5) file and neglecting to allow "localhost" access to the smbd. In addition, the smbpasswd command is only useful if Samba - has been set up to use encrypted passwords. See the file - ENCRYPTION.txt "LanMan and NT Password Encryption in Samba" in the docs directory for details on how to do this. VERSION This man page is correct for version 3.0 of - the Samba suite. This man page is correct for version 3.0 of the Samba suite. SEE ALSO smbpasswd(5), - samba(7) - smbpasswd(5), Samba(7). AUTHOR The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter