Change Windows domain Password from Panther

Question

Change Windows domain Password from Panther

Hi all,
I cannot find way to change a domain user password from a OSX client. When using connect to server SMB://.. there is no option for changing the password if it has expired. I don't think we can use the MA UAM, since the windows servers don't have SFM running ( and they won't do that). Saw something on this forum about kerberos.app but I could not find it on OSX 10.3.9
Are there any solutions?
Thanks in advance
Costas

PMAC G5 2P Mac OS X (10.3.9)

Posted on May 2, 2006 11:50 AM

Reply

Answer 1

May 2, 2006 12:15 PM in response to Costas Manousakis

You can use Kerberos.app to change a password in Active Directory.

Reply

Answer 2

May 2, 2006 12:33 PM in response to Trevor Seward

Could you provide more info? I cannot find Kerberos.app on my HD. (running OSX 10.3.9). Also I don't think (but cannot be sure) that our Windows servers are using Active Directory. I've heard from the IT section that they are working on switching to AD , but I don't think its done yet.

Thanks
Costas

PMAC G5 2P

Reply

Answer 3

May 2, 2006 1:56 PM in response to Costas Manousakis

"I cannot find Kerberos.app on my HD"

/System/Library/CoreServices/Kerberos

Get your ticket by entering your login credentials, then change the password.

Reply

Answer 4

May 3, 2006 6:09 AM in response to Templeton Peck

Thanks, "Find" from Finder did not find it there.
Now hopefully one last question : What credentials do I use? I tried username the windows one (both in the form domain\uname and just uname), and in the realm I tried domain, a fully qualified domain name of a windows server such as "servername.company.com", just the name of the server "servername". I always get the message that the realm is not in my configuration file or does not exist. I can connect to the server using the "Connect to server" command and for address use "smb://servername/Sharepath". I can ping using servername.company.com. Any help on this please?

Thanks,
Costas

Reply

Answer 5

May 3, 2006 7:21 AM in response to Costas Manousakis

Is your Mac joined to the domain, or do you just log in locally to it?

Reply

Answer 6

May 3, 2006 1:15 PM in response to Trevor Seward

No, they will not let the Macs join the domain. The Macs log in I guess locally.

Reply

Answer 7

May 3, 2006 2:22 PM in response to Costas Manousakis

I believe your Mac must be joined to the domain in order for you to use Kerberos.app to change your password.

Reply

Answer 8

May 4, 2006 6:03 AM in response to Trevor Seward

So this means that a network admin has to do it. Could you point me somewhere to read up on OSX Macs joining windows domains?

Thanks for all the info.

Reply

Answer 9

May 4, 2006 12:48 PM in response to Costas Manousakis

All of the information I've seen only applies to LDAP domains (or, Active Directory). The old NT domain model is not an LDAP model, so while I know you can join a machine with Samba, I'm not aware of OS X being able to do so with the GUI-integration provided to us.

Here is some information, but if you google "OS X" Active Directory you'll find a lot more valuable info for your IT personnel:

http://www.microsoft.com/technet/technetmag/issues/2005/01/MacSecure/default.asp x

Reply