Screen Lock rejects password

[Bryann Melvin]

On Thu, 2005-12-15 at 03:16 +0000, ubuntu-users-request at lists.ubuntu.com
wrote:
> Subject: Re: Screen Lock rejects password
> To: Ubuntu Help and User Discussions <ubuntu-users at lists.ubuntu.com>
> Message-ID: <43A0DFC6.6040109 at csee.wvu.edu>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> 
> Peter Cockriell wrote:
> 
> > Hello all,
> >
> > This is my first Ubuntu install (v5.10) and first time administering
> a 
> > linux system, though I've been a *nix user for many years.  My
> install 
> > went absolutely peachy and everything configured properly on the
> first 
> > go.
> >
> > Today I setup Kerberos v.5, Samba & Winbind in order to share files
> to 
> > users in a Windows 2003 Server domain.   That went fine and I
> acquired 
> > a lease (kinit) from the domain server fine.  I had to leave my
> desk 
> > for a moment so I locked my screen ... and now it's rejecting my 
> > password.  Anyone have any thoughts on this?  I know I can reset
> the 
> > password through grub, but I'd prefer to understand why this has 
> > happened and how I can prevent the problem.
> 
> 
> I would think that somewhere along the way kerberos got added to your 
> /etc/pam.d/common-auth file or some such.  And now you can't 
> authenticate against the credentials properly.  I haven't installed 
> kerberos in a long while, but its entirely possible that that
> happened.  
> I would login via single user mode(the repair console at the grub 
> prompt) and check everything under /etc/pam.d/ to make sure 
> kerberos(pam_ldap I think) didn't sneak in there some how.  I
> shouldn't 
> have but thats my thought.  Also maybe pam_smb or some such.  Ive
> never 
> done samba auth through pam so I have no clue on that one. 
> 
This SOUNDS like the computer has been set to synchronize the UNIX
password with the win client password...and they were not the same..

solution would be to log in as above and fix your password
AND /etc/samba/smb.conf


>From smb.conf sample

> # This boolean parameter controls whether Samba attempts to sync the Unix
> # password with the SMB password when the encrypted SMB password in the
> # passdb is changed.
> ;   unix password sync = no
> 
This is the way ubuntu has it configured ...unless you remove the ";" it will synchronize

Bryann