Dan Ohnesorg
2002-Sep-01 12:05 UTC
[Samba] Feature request: Prevent user from changing password
I need a shared account, which will not be able to change password - there is naturally DOS problem if someone will change the password. I can probably disable it over policy editor, but it is not enough. Will be possible to add such a attribute to smbpasswd? There can be probably posibility to specifi a date, until which is not possible to change password, like in shadow int sp_min; /* days until change allowed. */ cheers dan -- ----------------------------------------------------------- / Dan Ohnesorg Dan@ohnesorg.cz \ < Jino?ansk? 7 252 19 Rudn? u Prahy > \ tel: +420 311 679679 +420 311 679976 fax: +420 311 679311 / -----------------------------------------------------------
Andrew Bartlett
2002-Sep-02 06:32 UTC
[Samba] Feature request: Prevent user from changing password
Dan Ohnesorg wrote:> > I need a shared account, which will not be able to change password - > there is naturally DOS problem if someone will change the password. I can > probably disable it over policy editor, but it is not enough. > > Will be possible to add such a attribute to smbpasswd? There can be > probably posibility to specifi a date, until which is not possible to > change password, like in shadow int sp_min; /* days until change allowed. > */We got close to this when sombody was writing a patch to rework the password change subsystem. I need that patch picked back up, my comments intergrated and a new patch submitted... Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net