samba - Feb 2004 - Samba Password Aging

Samba version 2.999+3.0cvs20020906-1 for Debian

Somehow the Samba password is aging and is requiring a reset once a 
month for a couple of users.  I can't see anything in the man pages to 
indicate that the passwords age, so how is Samba doing it, and how do I 
stop this behavior?

One user is on Windows 2000 and the other on Windows XP.

The Windows passwords are not aging and neither are the Linux passwords 
on the Samba server itself, just the Samba password.

Plus, with the new *.tdb format, how do you see what users are there? 
This seems to be a valid security hole if there is no Samba machanism to 
see into this mysterious database to find out what settings are there 
and to audit the users that might show up without authorization.

...Thanks,
...Ken

On Tue, 2004-02-03 at 09:12, Kenneth Loafman wrote:
> Samba version 2.999+3.0cvs20020906-1 for Debian
> 
> Somehow the Samba password is aging and is requiring a reset once a 
> month for a couple of users.  I can't see anything in the man pages to 
> indicate that the passwords age, so how is Samba doing it, and how do I 
> stop this behavior?
By not running such an old version of Samba.

Current versions of samba in debian use smbpasswd by default (will keep
tdbsam if you upgrade however) and do not have the 21 day password
expiry.

pdbedit allows you to see into the tdbsam.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20040203/522d3fb0/attachment.bin