samba - Sep 2008 - WG: Samba LDAP entries for Password Change

Hello,

This must be set in LDAP:

sambaPwdCanChange=1 ;or you will never be asked to change your password
sambaPwdLastSet=0
sambaPwdMustChange=0; on my Suse this must be set too try it out for
your machine
And how you' ve been told the sambaMaxPwdAge must be set.

Greetings
Daniel

-----Urspr?ngliche Nachricht-----
Von: samba-bounces+mueller=tropenklinik.de@lists.samba.org
[mailto:samba-bounces+mueller=tropenklinik.de@lists.samba.org] Im
Auftrag von Jorge Concha C.
Gesendet: Dienstag, 16. September 2008 23:36
An: Albrecht Dre?; samba@lists.samba.org
Betreff: Re: [Samba] Samba LDAP entries for Password Change


Hi...
sorry for my bad english.
> - when a new account is created, the user immediately must change the
> password when [s]he first logs in;
> - after that, the password shall expire after x days.
sambaMaxPwdAge =  number of seconds  (60 x 60 x 24 x nDays)
sambaPwdLastSet = set to '0'  at create the account.

good luck

Jorge C.

On Tue, 16 Sep 2008 10:27:53 -0400, Albrecht Dre?  
<albrecht.dress@lios-tech.com> wrote:
> Hi all,
>
> I have a question regarding the enforced change of passwords in Samba
> 3.0.28 (coming with Ubuntu Hardy) in connection with a LDAP backend.
In  
> particular, I am looking for a documentation how the fields  
> sambaMinPwdAge, sambaMaxPwdAge (from sambaDomain), sambaPwdCanChange
and  
> sambaPwdMustChange (from sambaSAMAccount) interact.
>
> I would like to have the following:
> - when a new account is created, the user immediately must change the
> password when [s]he first logs in;
> - after that, the password shall expire after x days.
>
> Unfortunately, I tried a number of combinations without success.   
> Everything seems to be controlled by the sambaMaxPwdAge setting
(seconds  
> relative to sambaPwdLastSet when the password must be changed?), and
the  
> other entries seem to be irrelevant?
>
> Any documentation/pointer would be welcome!
>
> Thanks, Albrecht.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

This works, thanks a lot for your quick help!

Thanks, Albrecht.

Am 17.09.2008 08:11:42 schrieb(en) Daniel M?ller:
> This must be set in LDAP:
> 
> sambaPwdCanChange=1 ;or you will never be asked to change your  
> password
> sambaPwdLastSet=0
> sambaPwdMustChange=0; on my Suse this must be set too try it out for
> your machine
> And how you' ve been told the sambaMaxPwdAge must be set.