samba - Mar 2004 - Anyone have account lockouts working on a Samba PDC?

According to the documentation, Samba 3 supports account lockouts (ie:
bad password attempt 5 times will result in the PDC returning an
NT_STATUS_ACCOUNT_LOCKED_OUT message, until the account is manually
reset with pdbedit).

This syntax I'm using appears to be correct, but I'm not actually
getting actual account lockouts:

pdbedit -P "bad lockout attempt" -C 5
- and -
pdbedit -P "bad lockout attempt"
...prints the right response.

So does anyone have account lockouts working with Samba 3 acting as a
PDC?

I've tried the tdbsam backend without any luck (and building Samba
with MySQL support yields the dreaded "Could not determine network
interfaces" error message).

Thanks in advance for any responses.

Robert Giles
rgiles at mail dot utexas punto edu

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Robert Giles wrote:

| According to the documentation, Samba 3 supports
| account lockouts (ie: bad password attempt 5 times will
| result in the PDC returning an NT_STATUS_ACCOUNT_LOCKED_OUT
| message, until the account is manually reset with pdbedit).

This doesn't work right now.  Will be supported in 3.0.3.
Sorry for the confusion.




cheers, jerry
- ----------------------------------------------------------------------
Hewlett-Packard            ------------------------- http://www.hp.com
SAMBA Team                 ---------------------- http://www.samba.org
GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot
(2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAWGoiIR7qMdg1EfYRAkBPAKDb74QOush+iiECmtZ3FIUw+GY4kACgx2ct
FcoiGLNZxLbN7xDw6Au1qqA=t3o6
-----END PGP SIGNATURE-----