SMB client on Linux fails with the NT status password must change error message

This topic describes how to verify and resolve an NT status password must change error on the SMB client on Linux®.

Description

The user is trying to access the SMB client on Linux and receives this error message:
NT_STATUS_PASSWORD_MUST_CHANGE

Cause

The specified password expired.

Verification

Verify the password by running the following command on an IBM Storage Scale protocol node: 
/usr/lpp/mmfs/bin/wbinfo -a '<domain>\<user>'

The expected result is that the following messages display:

plaintext password authentication succeeded.
challenge/response password authentication succeeded.

If this message displays: 

Could not authenticate user mzdom\aduser1 with challenge/response
the specified password probably expired.

Resolution

Log on to a Windows client, and when prompted, enter a new password. If the problem persists, ask the AD administrator to unlock the account.