samba - Sep 2006 - "refuse machine password change" policy

We have a PDC and BDC with Samba 3.0.23a and an LDAP backend. The
"refuse machine password change" policy was set on both (and both
restarted).

Computers on that domain seem to ignore the setting, as confirmed both
by a packet capture and by looking at it in the backend.

Is the policy fully supported in Samba? Any ideas?

Thanks!

> We have a PDC and BDC with Samba 3.0.23a and an LDAP backend. The
> "refuse machine password change" policy was set on both (and both
> restarted).
>
> Computers on that domain seem to ignore the setting, as confirmed both
> by a packet capture and by looking at it in the backend.
>
> Is the policy fully supported in Samba? Any ideas?
>
> Thanks!
It has been over a year since I looked at this, but at that time with
3.0.20 this setting only affected what Samba returned when a client asked
what the policy was, Samba did not enforce the policy on the server side.
In my testing clients only honored it and did not try to change their
machine passwords when the policy was set at the time they joined the
domain.

John Janosik