John, Could you try to change the password using smbpasswd (instead of using libpam-smbpass)? Does it work is you add the following line to /etc/ldap/ldap.conf on the samba server: TLS_REQCERT never Cheers, Ivo De Decker