samba - Feb 2002 - Antwort: Password about to expire -- Turn Windlows Client Password Ageing Off?

Hi,
there is a "X" value for the acount flags in smbpasswd ... it means no
password expiry! I found it on passdb/passdb.c. If it work?s, maybe I 
don?t no! Also the password expire time ist hard coded in passwd.c too ... 
set to infinity.

Take a look at the passwd.c code!

Regards, Thomas



Gesendet von:   samba-admin@lists.samba.org
An:     <samba@lists.samba.org>
Kopie: 
Thema:  [Samba] Password about to expire -- Turn Windlows Client Password Ageing
Off?


I have a Domain controlled by a (Samba 2.2.2 upgraded to) Samba 2.2.3a 
PDC,
with
unix password sync = yes

The PDC (on a Mandrake Linux 8.X box) does not use password ageing, and we
don't want password ageing on our network.

We have a mix of Windows 98, NT4 and 2000 client workstations.

Unfortunately, some of the Windows 2000 users who log in to the domain 
have
complained that Windows is insisting that they must change their domain
password, and also that the interval given until expiry seems to change at
random.

If they do chose to do change the password, then things will usually carry
on with no problem. Also, the workstation "Local Security Settings" 
(Control
Panel>Administrative tools>Local Security Settings/Local Policies/Security
Options/Prompt user to change password ...) can be edited so that no 
warning
is displayed, although I've been told that the machine may suddenly insist
on a password change later.

Is there any way to specify from the Samba PDC that there is no expiry
period for the password?

Also, a minor problem can occur with the password changing/synchronising: 
if
the new password is too simple (eg a dictionary word) then it will be
rejected by the Linux server. This is reported to the user as "The user 
name
or old password was incorrect ..." Is it possible to make this message 
less
misleading?

Is this fixable?

Thanks for any help,
Steven

==Steven Mackenzie
Active Navigation Ltd
http://activenavigation.com/
+44 (0) 23 8074 2420
sjm@activenavigation.com


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

TT said:
>there is a "X" value for the acount flags in smbpasswd ... it
means no
>password expiry! I found it on passdb/passdb.c. If it work?s, maybe I
>don?t no! Also the password expire time ist hard coded in passwd.c too ...
>set to infinity.
OK, Each user has a line in smbpasswd a little bit like this:
nobody:99:XXX:XXX:[DU         ]:LCT-00000000:
and you (and the code) are suggesting that replacing the space after the U
with an X will stop the password expiry messages for that user?

nobody:99:XXX:XXX:[DUX        ]:LCT-00000000:

Did I miss any documentation about this? Anyway, I'll try this and see if I
get any more complaints ...
>Take a look at the passwd.c code!
Not as scary as I thought it would be!

Thanks for you help,
Steven