samba / UNIX password sync

[Vladimir Kosovac]

Hi all.

I am running very old version of samba (2.2.7) and cannot upgrade just yet,
must make this work as it is (if possible).

After playing a bit with pam modules, I got first part of what I want to do
going - windows user is able to change domain password from windows.
However, this change never gets synced to Linux password, although (I think)
configuration is OK. Can someone give me some pointers to what else I need
to look at? Current relevant config is:

Server: Red Hat 7.1 / samba-2.2.7-2.7.2 (compiled from RH source with some
extra options, --with pam-smb_passwd included)
Client: Windows 2000 / some XP

#/etc/pam.d/samba
#%PAM-1.0
# The PAM configuration file for the `samba' service
#
auth       required     /lib/security/pam_smbpass.so nodelay
account    required     /lib/security/pam_pwdb.so audit nodelay
session    required     /lib/security/pam_pwdb.so nodelay
password   required     /lib/security/pam_smbpass.so nodelay
smbconf=/etc/samba/smb.conf

#/etc/samba/smb.conf
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
pam password change = yes
obey pam restrictions = yes

What am I missing? Help appreciated,

Vladimir