Mandi! Rowland Penny via samba In chel di` si favelave...> > But my question really is: why this policy apply, if i've not enabled > > in GPO? > Probably because GPOs have no effect on a Samba AD DC, they will only > effect Windows clients.Rowland, i'm speaking about windows clients, not samba servers! I've enabled 'complexity checks' in samba servers, and disabled it on GPOs. I'm expecting that complexity checks are NOT enforced on windows client, i'm expecting right? -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
On Thu, 21 Jun 2018 12:39:06 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote:> Mandi! Rowland Penny via samba > In chel di` si favelave... > > > > But my question really is: why this policy apply, if i've not > > > enabled in GPO? > > Probably because GPOs have no effect on a Samba AD DC, they will > > only effect Windows clients. > > Rowland, i'm speaking about windows clients, not samba servers! > > I've enabled 'complexity checks' in samba servers, and disabled it on > GPOs. > I'm expecting that complexity checks are NOT enforced on windows > client, i'm expecting right? >Sorry, but wrong ;-) I would turn off the complexity checks on the DC. The clients in a domain will look to the account database for the password policy and this is stored on a DC. Rowland
Mandi! Rowland Penny via samba In chel di` si favelave...> The clients in a domain will look to the account database for the > password policy and this is stored on a DC....but windows client, for local users, does not read samba AD 'password settings' rules... Anyway, i've found the culprit. I wear sandals, the habit and I kneel on chickpeas... i was sure i've saved the policy, but was not the case. Policy saved, now my script change Administrator password flawlessy... Sorry... -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
L.P.H. van Belle
2018-Jun-22 13:26 UTC
[Samba] Password complexity checks and local users...
Hai. :-) better that is was you.. then a samba problem.. :-) Time for holiday also Marco? Im counting downnow... 1.5 hours to go.. But i made some nice things yesterday and today.. See the next mail.. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: vrijdag 22 juni 2018 15:17 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Password complexity checks and local users... > > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > The clients in a domain will look to the account database for the > > password policy and this is stored on a DC. > > ...but windows client, for local users, does not read samba AD > 'password settings' rules... > > Anyway, i've found the culprit. > I wear sandals, the habit and I kneel on chickpeas... i was sure > i've saved the policy, but was not the case. > > Policy saved, now my script change Administrator password flawlessy... > > > Sorry... > > -- > dott. Marco Gaiarin GNUPG > Key ID: 240A3D66 > Associazione ``La Nostra Famiglia'' > http://www.lanostrafamiglia.it/ > Polo FVG - Via della Bontà, 7 - 33078 - San Vito al > Tagliamento (PN) > marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 > f +39-0434-842797 > > Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! > http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 > (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA) > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >