I would like to know if there is a way, and how to accomplish this very simple task: Can samba force clients to change thier passwords from windows. Like the NT way "Your password has expired, please type new password" etc... If there is not support, why isn't there? this seems to me to be one large feature of a PDC!! Especially when removing a winNT/2000 server and placing a linux/samba server in it's place!
I think you need to use w2k server's poledit.exe to create a policy file that samba can export to the windows clients. You can also set this policy on each machine I think. But in a PDC situation, you can push out policy files to the clients. Michael On 22 Sep 2001, Thomas E Bruno wrote:> > > I would like to know if there is a way, and how to accomplish this very > simple task: > > Can samba force clients to change thier passwords from windows. Like the > NT way "Your password has expired, please type new password" etc... > > If there is not support, why isn't there? this seems to me to be one > large feature of a PDC!! Especially when removing a winNT/2000 server > and placing a linux/samba server in it's place! > > > >
Thomas E Bruno wrote:> > I would like to know if there is a way, and how to accomplish this very > simple task: > > Can samba force clients to change thier passwords from windows. Like the > NT way "Your password has expired, please type new password" etc... > > If there is not support, why isn't there? this seems to me to be one > large feature of a PDC!! Especially when removing a winNT/2000 server > and placing a linux/samba server in it's place!I beleive this code is available in Samba 2.2.1a. Simply ensure that unix/samba passwords are kept in sync and that 'enable pam restrictions' is 'yes'. Then just do normal password expiry on your unix accounts, and Samba will enforce this during the domain logon process. Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Samba Team member, Build Farm maintainer abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net