samba - Mar 2013 - samba4 provision password complexity error

I am trying to provision my samba 4 domain and even though I have deactivated
password complexity using the samba-tool I
still receive this error during the provision:

ERROR(ldb): uncaught exception - 0000052D: Constraint violation -
check_password_restrictions: the password does not
meet the complexity criteria!


Is this a known issue or do I need to do something else to get this working (not
counting making the password more complex)?

On 03/10/2013 10:21 PM, Gerry Reno wrote:
> I am trying to provision my samba 4 domain and even though I have
deactivated password complexity using the samba-tool I
> still receive this error during the provision:
>
> ERROR(ldb): uncaught exception - 0000052D: Constraint violation -
check_password_restrictions: the password does not
> meet the complexity criteria!
>
>
> Is this a known issue or do I need to do something else to get this working
(not counting making the password more complex)?
>
>
When I check the complexity before the provision it is off.

When I check the complexity after the error it is on !!

Something is turning the complexity back on during the provision.   BUG

On 03/10/2013 10:39 PM, Gerry Reno wrote:
> On 03/10/2013 10:21 PM, Gerry Reno wrote:
>> I am trying to provision my samba 4 domain and even though I have
deactivated password complexity using the samba-tool I
>> still receive this error during the provision:
>>
>> ERROR(ldb): uncaught exception - 0000052D: Constraint violation -
check_password_restrictions: the password does not
>> meet the complexity criteria!
>>
>>
>> Is this a known issue or do I need to do something else to get this
working (not counting making the password more complex)?
>>
>>
> When I check the complexity before the provision it is off.
>
> When I check the complexity after the error it is on !!
>
> Something is turning the complexity back on during the provision.   BUG
>
>
>
Ok I finally gave up and made something really complex:   Administrator1

Boy, we feel really secure now.    :rolleyes:


RANT:  I wish people would stop all this complexity nonsense and just let people
set their passwords how they want to
set them.

Known issue - see the wiki. [I don't think you can change the
password complexity before provisioning, but perhaps you can.]

#this sets the complexity req off.
#(I do this after provisioning, but it may work before...)

samba-tool domain passwordsettings set --complexity=off

---
But you'll have to run provisioning again, which will fail.
Thus, the easiest way I've found is simply to nuke the Samba install

ie.
rm /usr/local/samba/ -rf

Then run "make install" again and re-run provisioning.

This all assumes you're running 4.0.3 and did your own compile and
install into the default directory.

-Greg

GR> I am trying to provision my samba 4 domain and even though I have
GR> deactivated password complexity using the samba-tool I
GR> still receive this error during the provision:

GR> ERROR(ldb): uncaught exception - 0000052D: Constraint violation -
GR> check_password_restrictions: the password does not
GR> meet the complexity criteria!


GR> Is this a known issue or do I need to do something else to get
GR> this working (not counting making the password more complex)?

On Sun, 2013-03-10 at 22:21 -0400, Gerry Reno wrote:
> I am trying to provision my samba 4 domain and even though I have
deactivated password complexity using the samba-tool I
> still receive this error during the provision:
> 
> ERROR(ldb): uncaught exception - 0000052D: Constraint violation -
check_password_restrictions: the password does not
> meet the complexity criteria!
> 
> 
> Is this a known issue or do I need to do something else to get this working
(not counting making the password more complex)?
Just make the password more complex.  This is by design, because
provision resets the password complexity settings (and all other
settings).

You may reset the settings and then reset the admin password with
'samba-tool user setpassword administrator' later if you really, really
must so dramatically reduce the security of your network.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

Bit late, i was on holiday. 

But. 

Password complexity, ... 

What is beter... 

ThiS1sMyComplexPasw0rdForM3AndNot4You.
or 
}W`#t_L= 

Wel i choose the first, even there are only char and numbers in that password. 

Look here for more info. 
http://rumkin.com/tools/password/passchk.php 


Louis

 
>-----Oorspronkelijk bericht-----
>Van: abartlet at samba.org [mailto:samba-bounces at lists.samba.org] 
>Namens Andrew Bartlett
>Verzonden: maandag 11 maart 2013 23:32
>Aan: Gerry Reno
>CC: samba at lists.samba.org
>Onderwerp: Re: [Samba] samba4 provision password complexity error
>
>On Sun, 2013-03-10 at 22:21 -0400, Gerry Reno wrote:
>> I am trying to provision my samba 4 domain and even though I 
>have deactivated password complexity using the samba-tool I
>> still receive this error during the provision:
>> 
>> ERROR(ldb): uncaught exception - 0000052D: Constraint 
>violation - check_password_restrictions: the password does not
>> meet the complexity criteria!
>> 
>> 
>> Is this a known issue or do I need to do something else to 
>get this working (not counting making the password more complex)?
>
>Just make the password more complex.  This is by design, because
>provision resets the password complexity settings (and all other
>settings).
>
>You may reset the settings and then reset the admin password with
>'samba-tool user setpassword administrator' later if you really,
really
>must so dramatically reduce the security of your network.
>
>Andrew Bartlett
>
>-- 
>Andrew Bartlett                                
>http://samba.org/~abartlet/
>Authentication Developer, Samba Team           http://samba.org
>
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>