I've just found out today that my system won't let users (2000 and XP
clients) change their passwords.
From their consoles they get permission denied messages.

Looking at the logs its clearly a Samba/PAM interaction issue but all looks
OK in the pam.d directory.

I've spent a few hours searching online but can't find anything that match's
this scenario.

Extract from users log follows.

Any help would be appreciated.