We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could sync the ldap/samba password when using smbpasswd -a but not passwd. To fix this I added a line to my PAM system-auth settings to update the smb password file when changing my password. Again this works, but I'm getting the following error.Changing password for user testuser1.Enter login(LDAP) password:New UNIX password:Retype new UNIX password:LDAP password information update failed: Invalid credentialspasswd: Authentication failureThis error isn't correct because both the LDAP and Samba passwords change successfully. Does any one have a clue why I'm getting the error at all?The line I added to PAM is in bold:password    requisite     pam_cracklib.so try_first_pass retry=3password    optional      pam_smbpass.so use_authtok use_first_passpassword    sufficient    pam_unix.so md5 shadow nullok try_first_pass use_authtokMy smb.conf file has the following:[global]workgroup = MyGroupsecurity = userpassdb backend = ldapsam:ldaps://192.168.124.89/ldap admin dn = cn=Directory Managerldap suffix = dc=example,dc=comldap user suffix = ou=Peopleldap group suffix = ou=Groupsldap passwd sync = yesldap delete dn = nowins support = yesAs I stated previously, everything is working as it should. I just don't want users freaking out when they see that nasty error message and I want it to go away.
Changing Samba/LDAP password with passwd
samba;password;pam;ldap