win客户端无法改samba PDC的密码？

coldcoffee

我的win客户端是用2003，可以登录到samba做的域中，但按Ctrl+Alt+Del后，没有办法更改密码：

smb.conf内容如下：
[global]
workgroup = test.com
netbios name = redhat
server string = Samba PDC running %v

encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
;hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0
;interfaces = eth0

log file = /var/log/samba/log.%m
max log size = 50

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
;IPTOS_LOWDELAY
security = user
os level = 64
local master = yes
domain master = yes
preferred master = yes
domain logons = yes

logon script = logon.bat
logon home = \\%L\%U\.profile
logon path = \\%L\profiles\%U
logon drive = H:

admin users = root

encrypt passwords = yes
bind interfaces only = Yes
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*Password* %n\n *Re-enter*new*password*%n\n *P assword*changed*
unix password sync = No
username map = /etc/samba/smbusers
[homes]
comment = Home Directories
browseable = no
writeable = yes
[profiles]
path = /home/samba/profiles
writeable = yes
browseable = yes
guest ok = no
[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
read only = yes
browseable = no
write list= root
guest Ok = no

bwb

将
security = user
os level = 64
改成：
security = ads
os level = 99
并将：
pam password change = Yes
admin users = root
去掉再试

coldcoffee

我试了，还是不行呀。再帮帮我吧。

coldcoffee

顶一下

gugong

肯定无法更改

coldcoffee

为什么？

coldcoffee

没有人回答，顶一下。

dannycat

没试过、也没想过用 samba 来做 PDC，不知道。

Samba 也真是的，不好好做它的客户机工作，还想当什么 PDC 呀……

不过， bwb 的 security=ads 肯定是错的， 它自己就是 PDC 了，找不到 ADS 的。