Winanjaya - PBXSoftwares.com
2006-Feb-04 04:21 UTC
[Samba] user must logon to change password
Dear All, I turned ON the Samba Policy Control "user must logon to change password" by runing below pdbedit command [root@samba samba]# pdbedit -P "user must logon to change password" account policy value for user must logon to change password is 0 [root@samba samba]# pdbedit -P "user must logon to change password" -C 1 account policy value for user must logon to change password was 0 account policy value for user must logon to change password is now 1 [root@samba samba]# pdbedit -P "user must logon to change password" account policy value for user must logon to change password is 1 I created user1 [root@samba samba]# pdbedit -a user1 new password: retype new password: Unix username: user1 NT username: Account Flags: [U ] User SID: S-1-5-21-2389550245-4160606791-3118586259-2004 Primary Group SID: S-1-5-21-2389550245-4160606791-3118586259-2005 Full Name: Home Directory: \\samba\user1 HomeDir Drive: H: Logon Script: logon.bat Profile Path: \\samba\user1\profile Domain: LINUX Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Sat, 14 Dec 1901 03:45:51 GMT Kickoff time: Sat, 14 Dec 1901 03:45:51 GMT Password last set: Sat, 04 Feb 2006 11:19:58 GMT Password can change: Sat, 04 Feb 2006 11:19:58 GMT Password must change: Sat, 14 Dec 1901 03:45:51 GMT [root@samba samba]# pdbedit -Lv -u user1 Unix username: user1 NT username: Account Flags: [U ] User SID: S-1-5-21-2389550245-4160606791-3118586259-2004 Primary Group SID: S-1-5-21-2389550245-4160606791-3118586259-2005 Full Name: Home Directory: \\samba\user1 HomeDir Drive: H: Logon Script: logon.bat Profile Path: \\samba\user1\profile Domain: LINUX Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Sat, 14 Dec 1901 03:45:51 GMT Kickoff time: Sat, 14 Dec 1901 03:45:51 GMT Password last set: Sat, 04 Feb 2006 11:19:58 GMT Password can change: Sat, 04 Feb 2006 11:19:58 GMT Password must change: Sat, 14 Dec 1901 03:45:51 GMT [root@samba samba]# when login from Windows 2000 Prof as user1 .. why it did not ask me to change my password .. ? .. please advise Many thanks in advance Regards Winanjaya *********************** Our outgoing mail has been scanned by MSS. ***********************
Winanjaya - PBXSoftwares.com
2006-Feb-04 05:47 UTC
[Samba] user must logon to change password
Dear All, This is my last progress: I added passdb = tdbsam into my [global] and it works I meant now It will ask me to change my password (because it has expired and must be changed) I changed it successfully but after that I met message "Unable to log you on because of an account restriction" and go back to login screen again, I enter my user id and my new password and it passed me back to change my password with reason the password has expired and must be changed. below is the last version of my /etc/samba/smb.conf please help.. thanks a lot in advance Regards Winanjaya [global] workgroup = LINUX server string = Samba Server printcap name = /etc/printcap load printers = yes log file = /var/log/samba/%m.log max log size = 50 security = user encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no os level = 65 preferred master = yes domain logons = yes logon drive = H: logon script = logon.bat wins support = yes dns proxy = no time server = yes passdb backend = tdbsam add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u [homes] comment = Home Directories browseable = no writable = yes [netlogon] comment = Network Logon Service path = /home/samba/netlogon writable = no public = no [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [tmp] comment = Temporary file space path = /tmp read only = no public = yes [public] path = /home/public public = yes only guest = no writable = yes read only = no browsable = yes printable = no ========== ----- Original Message ----- From: "Winanjaya - PBXSoftwares.com" <winanjaya@pbxsoftwares.com> To: <samba@lists.samba.org> Sent: Saturday, February 04, 2006 11:24 AM Subject: [Samba] user must logon to change password Dear All, I turned ON the Samba Policy Control "user must logon to change password" by runing below pdbedit command [root@samba samba]# pdbedit -P "user must logon to change password" account policy value for user must logon to change password is 0 [root@samba samba]# pdbedit -P "user must logon to change password" -C 1 account policy value for user must logon to change password was 0 account policy value for user must logon to change password is now 1 [root@samba samba]# pdbedit -P "user must logon to change password" account policy value for user must logon to change password is 1 I created user1 [root@samba samba]# pdbedit -a user1 new password: retype new password: Unix username: user1 NT username: Account Flags: [U ] User SID: S-1-5-21-2389550245-4160606791-3118586259-2004 Primary Group SID: S-1-5-21-2389550245-4160606791-3118586259-2005 Full Name: Home Directory: \\samba\user1 HomeDir Drive: H: Logon Script: logon.bat Profile Path: \\samba\user1\profile Domain: LINUX Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Sat, 14 Dec 1901 03:45:51 GMT Kickoff time: Sat, 14 Dec 1901 03:45:51 GMT Password last set: Sat, 04 Feb 2006 11:19:58 GMT Password can change: Sat, 04 Feb 2006 11:19:58 GMT Password must change: Sat, 14 Dec 1901 03:45:51 GMT [root@samba samba]# pdbedit -Lv -u user1 Unix username: user1 NT username: Account Flags: [U ] User SID: S-1-5-21-2389550245-4160606791-3118586259-2004 Primary Group SID: S-1-5-21-2389550245-4160606791-3118586259-2005 Full Name: Home Directory: \\samba\user1 HomeDir Drive: H: Logon Script: logon.bat Profile Path: \\samba\user1\profile Domain: LINUX Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Sat, 14 Dec 1901 03:45:51 GMT Kickoff time: Sat, 14 Dec 1901 03:45:51 GMT Password last set: Sat, 04 Feb 2006 11:19:58 GMT Password can change: Sat, 04 Feb 2006 11:19:58 GMT Password must change: Sat, 14 Dec 1901 03:45:51 GMT [root@samba samba]# when login from Windows 2000 Prof as user1 .. why it did not ask me to change my password .. ? .. please advise Many thanks in advance Regards Winanjaya *********************** Our outgoing mail has been scanned by MSS. *********************** -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba *********************** Your mail has been scanned by MSS. *********************** *********************** Our outgoing mail has been scanned by MSS. ***********************