This boolean parameter controls whether Samba attempts to synchronize the UNIX password with the SMB password when the encrypted SMB password in the smbpasswd file is changed. If this is set to yes the program specified in the passwd program parameter is called AS ROOT - to allow the new UNIX password to be set without access to the old UNIX password (as the SMB password change code has no access to the old password cleartext, only the new). This option has no effect if samba is running as an active directory domain controller, in that case have a look at the option and the samba-tool user syncpasswords command. passwd program passwd chat password hash gpg key ids no