[pwchange]
       path = /shares/pwchange
       comment = use this to change your smb passwords
       create mask = 0700
       valid users = @users
       read only = no
       root postexec = /etc/samba/pw-script 1 /shares/pwchange /var/log/samba/pwchange.log >/dev/null
       postexec = /etc/samba/pw-script 0 /shares/pwchange /var/log/samba/pwchange.log >/dev/null

#!/usr/bin/perl
# 04:56am 24-jan-2005 by robert_spitzenpfeil@yahoo.com
# free software not owned by SCO

use strict;
use Fcntl;

my $log = @ARGV[0]; # if 1 logfile will be created ( only possible if run as root )
my $pwchange_path = @ARGV[1]; # where to look for the files
my $pwchange_log  = @ARGV[2]; # logfile for pw changes by users
my $smbpasswd = "/usr/bin/smbpasswd"; # path to smbpasswd on the system
my $samba_user = $ENV{USER}; # needed to delete ONLY the users file !

if ( @ARGV[0] eq "" || @ARGV[1] eq "" || @ARGV[2] eq "" ) { print "usage as root: pw-script 1 <path to pw files> <path to logfile>\nusage as user: pw-script 0 <path to pw files> <path to logfile>\n! 3 arguments needed !\narg0: @ARGV[0]\narg1: @ARGV[1]\narg2: @ARGV[2]\n"; }

else {

  opendir(DIR,"$pwchange_path") or die("cannot open dir: $!");
    my @dir_lines = readdir DIR;
    shift @dir_lines;   # remove .
    shift @dir_lines;   # remove ..
  closedir(DIR);

  foreach my $dir_line ( @dir_lines ) {

    if ( -f "$pwchange_path/$dir_line" ) { # check if we are dealing with a file

      open(FILE,"$pwchange_path/$dir_line") or die("cannot open file: $!"); # read the file
        my @file_lines = <FILE>;
      close(FILE);

      my $username = @file_lines[0];
      $username    =~ s/\r//;   # this will EXTERMINATE THE F...... windows newline thingy
      $username    =~ s/\n//;   # this will ignore returns after a line

      my $oldpw    = @file_lines[1];
      $oldpw       =~ s/\r//;
      $oldpw       =~ s/\n//;


      my $newpw_1  = @file_lines[2];
      $newpw_1     =~ s/\r//;
      $newpw_1     =~ s/\n//;

      my $newpw_2  = @file_lines[3];
      $newpw_2     =~ s/\r//;
      $newpw_2     =~ s/\n//;


      if ( "$username" eq "$samba_user" ) { # only do something if the name in the change-fileis equal to the username connected to samba

        if ( $log eq "1" ) { &logfile($pwchange_log,$pwchange_path,$dir_line,$username,$oldpw,$newpw_1,$newpw_2,$samba_user); } # only root can create a logfile but CANNOT change the password with the "oldpassword newpassword newpassword" dialog !

        if ( $log ne "1" ) { &pwchange($smbpasswd,$username,$oldpw,$newpw_1,$newpw_2); } # only users can do this !

      } # end if


    } # end if ...

  } # end foreach ...

} # end else



sub logfile() {

  my ($pwchange_log,$pwchange_path,$dir_line,$username,$oldpw,$newpw_1,$newpw_2,$samba_user) =@_;

  sysopen(FILE, $pwchange_log, O_WRONLY|O_APPEND|O_CREAT,0700) or die("cannot open logfile: $!"); # append to logfile
      my $date = `date`;
      print FILE $date;
      print FILE "file used: $pwchange_path/$dir_line \n\n";
      print FILE "username: ",$username,"\n";
      print FILE "oldpw: ",$oldpw,"\n";
      print FILE "newpw_1: ",$newpw_1,"\n";
      print FILE "newpw_2: ",$newpw_2,"\n";
      print FILE "samba user: ",$samba_user,"\n";

      if ( "$newpw_1" ne "$newpw_2" ) { print FILE "-> new passwords don't match\n\n\n"; }

      else {
            print FILE "-> new passwords match\n\n\n";
           }

  close(FILE);

  `rm -f "$pwchange_path/$dir_line"`; # erase the file
}



sub pwchange() {

  my ($smbpasswd,$username,$oldpw,$newpw_1,$newpw_2) = @_;

  if ( "$newpw_1" eq "$newpw_2" ) {

    open (FILE, "|$smbpasswd -s") or die("cannot pipe into $smbpasswd: $!");
       print FILE qq|$oldpw\n|;
       print FILE qq|$newpw_1\n|;
       print FILE qq|$newpw_1\n|;
    close (FILE);

  } # end if

}

echo -e "new_password\nnew_password" | (passwd --stdin $USER)
echo -e "new_password\nnew_password" | (smbpasswd -s $USER)