Hi !
This is my firs post here. I've got a problem with password history
policy -C 3 which doesn't work !!
I set policy
pdbedit -P "maximum password age" -C 777600 (90days)
pdbedit -P "minimum password age" -C 691200 (80days)
"user must logon to change password" -C 2
"password history" -C 3
On clients (XP PRO) some of people doesn't see warrning with "password
expired" information and password history doesn't work !!! I can set
still the same password .
My backend is smbpasswd in smb.conf .I tried with pdbedit but when I
changed backend after restarting samba XP cannot login because it must
be added to domain again. In my production serwer I use smbpasswd
backend. So I don't want to add all computers again to domain!!! SID of
domain is the same like before !
Why after changing backend i must add again computer to domain??
To use pdbedit policies which backend should I use ??
Please help!!!
My ver. of samba
Version 3.0.26a-0.fc7
----------------------------------------------------
S? bardzo hetero. I w?a?nie si? pobrali!
Rewelacyjna komedia PA?STWO MLODZI: CHUCK i LARRY
W kinach od 21 wrze?nia!
http://klik.wp.pl/?adr=http%3A%2F%2Fadv.reklama.wp.pl%2Fas%2Fpanstwomlodzi.html&sid=31
Felipe Augusto van de Wiel
2007-Sep-19 15:24 UTC
[Samba] pdbedit -P "password history" doesn't work !!
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hubert Choma wrote, On 19-09-2007 06:36:> Hi ! > This is my firs post here. I've got a problem with password history > policy -C 3 which doesn't work !! > I set policy > pdbedit -P "maximum password age" -C 777600 (90days) > pdbedit -P "minimum password age" -C 691200 (80days) > "user must logon to change password" -C 2 > "password history" -C 3 > > On clients (XP PRO) some of people doesn't see warrning with "password > expired" information and password history doesn't work !!! I can set > still the same password .Usually this only affects users _after_ the policy is in place. In my experience, only after we made all the users change their passwords, the policy applied to them all, from time to time, for whatever reason, the policy lost our setup and fallback to default, I'm using LDAP as a backend and Samba 3.0.24 in Debian.> My backend is smbpasswd in smb.conf .I tried with pdbedit but when I > changed backend after restarting samba XP cannot login because it must > be added to domain again. In my production serwer I use smbpasswd > backend. So I don't want to add all computers again to domain!!! SID of > domain is the same like before !I think you can use pdbedit to help you changing backends, you shouldn't need to rejoin all machines just because you change the passdb, some people move from smbpasswd to LDAP and are able to avoid that.> Why after changing backend i must add again computer to domain??Because some info got lost in the migration. Try to use pdbedit to migrate the info from one backend to the other.> To use pdbedit policies which backend should I use ?? > Please help!!! > My ver. of samba > Version 3.0.26a-0.fc7Any one. :-) http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#pdbeditthing Kind regards, - -- Felipe Augusto van de Wiel <felipe@paranacidade.org.br> Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFG8T7+Cj65ZxU4gPQRCEedAJ9gHrISmyqszhD/vHTVjoohL8Y+mgCfUxuM kw55AwgJg1OOhcDUXjJFhRc=eabD -----END PGP SIGNATURE-----