LDAP Accounts losing passwords

[jamie <jamie@staff.newberg.k12.or.us>]

I am having the strangest problem and it has me quite worried. In my ldap
directory all the sudden the high schools user passwords are not working.
Its only the high school users and none of the middle schools user.

All the accounts were created at the same time and all worked initially. But
all the sudden nothing. Each account has 3 passwords. On the accounts that
are having the problem the NtPassword lmPassword work fine.

I don't know much about the crypt format or what ever but all the
alphanumeric in the crypt string look shorter in the accounts that don't
work than the strings that do.

The only thing I can think of that might be causing this problem it I have
backed up and restored the DB a few times using

slapcat > ldap.ldiff to make an ldif and
slapadd -l ldap.ldiff to put the db back into the database.

I would think that if this was a problem though It would cause trouble for
the other accounts.


High School
This accounts password is NOT working
dn: uid=samuel.porter,ou=People,dc=newberg,dc=k12,dc=or,dc=us
uid: samuel.porter
cn: SAMUEL S. PORTER
objectClass: account
objectClass: posixAccount
objectClass: sambaAccount
objectClass: top
objectClass: shadowAccount
objectClass: apple-user
objectClass: extensibleObject
objectClass: inetOrgPerson
userPassword:: e2NyeXB0fXg=
shadowLastChange: 11950
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/false
rid: 3346
primaryGroupID: 3347
acctFlags: [U          ]
uidNumber: 1173
gidNumber: 502
homeDirectory: /data/students/samuel.porter
gecos: SAMUEL S. PORTER
ntPassword: 57F8DB69C8FD0AB7AAD3B435B51404EE
lmPassword: D9EE07754D4BF46A760B8DD5C966296A
sn: none
apple-user-homeurl::
PGhvbWVfZGlyPjx1cmw+YWZwOi8vMTcyLjE2Ljk2LjgwL3N0dWRlbnRzP
 C91cmw+PHBhdGg+c2FtdWVsLnBvcnRlcjwvcGF0aD48L2hvbWVfZGlyPg==
userPKCS12: /Network/Servers/172.16.96.80/students/samuel.porter


Middle School Account
This accounts password IS working

dn: uid=amy.sells,ou=People,dc=newberg,dc=k12,dc=or,dc=us
uid: amy.sells
cn: amy.sells
objectClass: account
objectClass: posixAccount
objectClass: sambaAccount
objectClass: top
objectClass: shadowAccount
objectClass: apple-user
objectClass: extensibleObject
objectClass: inetOrgPerson
userPassword:: e2NyeXB0fSQxJDMyOTYxMjkzJFQ4ZmpIOTJJWVdPRWJFeW5XbkNxWS4=
shadowLastChange: 11955
loginShell: /bin/false
rid: 6230
primaryGroupID: 6231
acctFlags: [U          ]
uidNumber: 2615
gidNumber: 503
homeDirectory: /data/students/amy.sells
gecos: amy.sells
ntPassword: 169A70204812D96DAAD3B435B51404EE
lmPassword: C4138B72E68A5A2DD6492DF8744F909E
sn: none
apple-user-homeurl::
PGhvbWVfZGlyPjx1cmw+YWZwOi8vMTcyLjE2LjQ4LjUwL3N0dWRlbnRzP
 C91cmw+PHBhdGg+YW15LnNlbGxzPC9wYXRoPjwvaG9tZV9kaXI+
userPKCS12: /Network/Servers/172.16.48.50/students/amy.sells


Thanks for any suggestions
Jamie Mcparland.