samba - Sep 2008 - Samba LDAP entries for Password Change

Hi all,

I have a question regarding the enforced change of passwords in Samba  
3.0.28 (coming with Ubuntu Hardy) in connection with a LDAP backend.   
In particular, I am looking for a documentation how the fields  
sambaMinPwdAge, sambaMaxPwdAge (from sambaDomain), sambaPwdCanChange  
and sambaPwdMustChange (from sambaSAMAccount) interact.

I would like to have the following:
- when a new account is created, the user immediately must change the  
password when [s]he first logs in;
- after that, the password shall expire after x days.

Unfortunately, I tried a number of combinations without success.   
Everything seems to be controlled by the sambaMaxPwdAge setting  
(seconds relative to sambaPwdLastSet when the password must be  
changed?), and the other entries seem to be irrelevant?

Any documentation/pointer would be welcome!

Thanks, Albrecht.

Hi...
sorry for my bad english.
> - when a new account is created, the user immediately must change the  
> password when [s]he first logs in;
> - after that, the password shall expire after x days.
sambaMaxPwdAge =  number of seconds  (60 x 60 x 24 x nDays)
sambaPwdLastSet = set to '0'  at create the account.

good luck

Jorge C.

On Tue, 16 Sep 2008 10:27:53 -0400, Albrecht Dre?  
<albrecht.dress@lios-tech.com> wrote:
> Hi all,
>
> I have a question regarding the enforced change of passwords in Samba  
> 3.0.28 (coming with Ubuntu Hardy) in connection with a LDAP backend.  In  
> particular, I am looking for a documentation how the fields  
> sambaMinPwdAge, sambaMaxPwdAge (from sambaDomain), sambaPwdCanChange and  
> sambaPwdMustChange (from sambaSAMAccount) interact.
>
> I would like to have the following:
> - when a new account is created, the user immediately must change the  
> password when [s]he first logs in;
> - after that, the password shall expire after x days.
>
> Unfortunately, I tried a number of combinations without success.   
> Everything seems to be controlled by the sambaMaxPwdAge setting (seconds  
> relative to sambaPwdLastSet when the password must be changed?), and the  
> other entries seem to be irrelevant?
>
> Any documentation/pointer would be welcome!
>
> Thanks, Albrecht.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/