samba - May 2019 - change password after first login in samba4.10

Hi, list
I install samba 4.10.3 on centos.
I want to change the password after the first login by the user.
Tanks,

On 25/05/2019 08:28, sam zand via samba wrote:
> Hi, list
> I install samba 4.10.3 on centos.
> I want to change the password after the first login by the user.
> Tanks,
>
Sorry Sam, but there isn't enough info supplied, I guess you are 
referring to an AD domain (mainly because you asked about provisioning 
in an earlier question)

What are your clients ? (windows or Unix)

How are you creating users ?

Rowland

On 25/05/2019 08:58, sam zand wrote:
> Sorry, Rowland.
> yes I install samba AD 4.10.3
> client to connect the samba is Windows
> command for creating the user in samba: samba-tool user create
Allow me to introduce you to the help that comes with samba-tool ;-)

If you run 'samba-tool user create --help' it will show you just what 
options you can add to the command, I will not post all the output here, 
it is fairly extensive. Amongst the output you will find:

   --must-change-at-next-login
                         Force password to be changed on next login

Rowland

On 25/05/2019 09:31, sam zand wrote:
> Tanks for help Rowland
> I create a user with command: samba-tool user create TEST
> --must-change-at-next-login
> but after login, to share with the client wants me to "The user's
> password must be changed before logging on the first time" and I enter
> the new password then ok. but show command "The user name or password
> is incorrect" for me.
>
>
Ah, standard Windows practise is to enter the 'OLD' password first, then
the new one.

Rowland

On 25/05/2019 11:47, sam zand wrote:
> after entering the new password show message: "The user name or
password
> is incorrect" and don't log in and access the shared folder.
>
Do your users get prompted to change their password ?

If not, then it is a windows problem.

Rowland

On 25/05/2019 12:28, sam zand wrote:
> yes get a message to enter the new password but after entre new
> password get the message "The user name or password is incorrect"
>
> On 5/25/19, Rowland penny via samba <samba at lists.samba.org> wrote:
>> On 25/05/2019 11:47, sam zand wrote:
>>> after entering the new password show message: "The user name
or password
>>> is incorrect" and don't log in and access the shared
folder.
>>>
>> Do your users get prompted to change their password ?
>>
>> If not, then it is a windows problem.
>>
>> Rowland
>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
OK, lets start at the other end, back on the Samba DC. Run this command, 
(altered for your domain etc):

ldbsearch -H /var/lib/samba/private/sam.ldb -b 
'dc=samdom,dc=example,dc=com' -s sub 
'(&(objectClass=user)(sAMAccountName=rowland))'

NOTE: the command is all one line.

Either sanitise the output and post it in an email (do not add it as an 
attachment), or send it to me offline.

Rowland

On 25/05/2019 13:56, sam zand wrote:
> path  /var/lib/samba/private/sam.ldb not available
>
I did say that you would have to modify the command for your set up. If 
you compiled Samba with './configure', it should be 
/usr/local/samba/private/sam.ldb. If you compiled Samba with 
'--prefix=SOMEWHERE', then it will be
'$SOMEWHERE/private/sam.ldb'

If you are still unsure, then run this: samba -b | grep 'PRIVATE_DIR' | 
awk '{print $NF}'

That should print the directory where 'sam.ldb' is.

Rowland