samba - Dec 2023 - Users can login current and one previous password

On Tue, 26 Dec 2023 14:28:00 +0530
Anantha Raghava via samba <samba at lists.samba.org> wrote:
> Hi,
> 
> We are running Samba-AD version 4.18.1 and are observing a peculiar 
> behaviour.
> 
> Our environment contains 5 AD Domain Controllers. Users are able to 
> login to AD domain with "Current" and one "Previous"
password. That
> is, if I change my password now, I can login to my PC using my new
> password as well as previous password.
> 
This is an AD thing, wait an hour or so and the old password will no
longer work.

That fast enough ?

Rowland

Hi,

Can we change this behaviour?

Thanks & Regards,

Anantha Raghava


On 26/12/23 2:56 pm, Rowland Penny via samba wrote:
> On Tue, 26 Dec 2023 14:28:00 +0530
> Anantha Raghava via samba<samba at lists.samba.org>  wrote:
>
>> Hi,
>>
>> We are running Samba-AD version 4.18.1 and are observing a peculiar
>> behaviour.
>>
>> Our environment contains 5 AD Domain Controllers. Users are able to
>> login to AD domain with "Current" and one
"Previous" password. That
>> is, if I change my password now, I can login to my PC using my new
>> password as well as previous password.
>>
> This is an AD thing, wait an hour or so and the old password will no
> longer work.
>
> That fast enough ?
>
> Rowland
>
>
>