In some limited testing of configuring Samba 3 with IPA Samba seemed to require that sambapwdlastset be set in order to authenticate. If it wasn't I got:
$ smbclient --user tuser5 -L localhost Enter tuser5's password: session setup failed: NT_STATUS_PASSWORD_MUST_CHANGE
Once I set this value it worked.
Seems like the best place to set this is in the password plugin.
This is using samba-3.4.9-60.fc12.x86_64
Metadata Update from @rcritten: - Issue assigned to simo - Issue set to the milestone: FreeIPA 2.0 - 2010/10
Login to comment on this ticket.