samba - Dec 2005 - "passwd program" directive and windows

Hello,
Users on our domain can change their password because of the "passwd
program" directive in smb.conf
The script called by this program only update user's passwords. I
would like to add security for the choosen passord, ie i would like to add
control on the number of upper case, lower case, digit... This is not a problem.
I'd like to know: if the passord is not conformed with the policy, is there
a way to return to the windows's user a popup to tell him that there's
one
upper case missing, or ...
If this is not possible, is there a way to just tell him that security
policy is not reached ?
Thanks
-- 
Jerome
****************************************************************************
This email is solely intended to the addressees and contains confidential
information. Unless stated, the opinions and comments written down in this
document are the sender's property and not the official vision of our Group.
If you receive this email in error, please notify us by sending it back
immediately to the email address of the sender and then please delete it from
your own system. Please don't copy, use or forward the content of this
document
and its attachments to another person for any reason.
Thank you for your understanding.
****************************************************************************

> If this is not possible, is there a way to just tell him that security
> policy is not reached ?
If the password program fails you should get an 'error changing
password' message but I think this is the best you can hope for,
unfortunately.

Cheers,
Adam.

On 12/9/05, Jerome Tournier <jerome.tournier@idealx.com>
wrote:
> I'd like to know: if the passord is not conformed with the policy, is
there
> a way to return to the windows's user a popup to tell him that
there's one
> upper case missing, or ...
> If this is not possible, is there a way to just tell him that security
> policy is not reached ?
You can use the "check password script" smb.conf option to define a
password policy.  Users with too-simple passwords will get an error
message, however, it's not particularly helpful:

"Your password must be at least 8 characters, cannot repeat any of
your previous 0 passwords and must be at least 0 days old.  Please
type a different password.  Type a password which meets these
requirements in both text boxes."

I unfortunately don't know a way around that.

Josh Kelley