On Thu, 21 Nov 2024 13:08:41 +0000
Heinz H?lzl <heinz.hoelzl at gvcc.net> wrote:
> Am Donnerstag, dem 21.11.2024 um 12:39 +0000 schrieb Rowland Penny via
> samba:
> > On Thu, 21 Nov 2024 12:06:33 +0000
> > Heinz H?lzl via samba <samba at lists.samba.org> wrote:
> >
> > > hi,
> > >
> > > I have accounts which have pwdLastSet=0, even if the password was
> > > set
> > > a few days or weeks ago.
> > >
> > > Could that be?
> > >
> > > or what exactly does the attribute pwdLastSet mean?
> > >
> >
> > If the pwdLastSet attribute is set to '0', it should mean that
the
> > user
> > must change their password at next logon, unless
> > 'UF_DONT_EXPIRE_PASSWD' is set in 'userAccountControl'
> >
> > How are you changing the passwords ?
> >
> our passwords expire every 90 days
>
>
> if the password has expired the pwdLastSet is also 0 ?
>
>
pwdLastSet can contain 0 or a number like '133297347992923650', the
latter is the number of 100-nanosecond intervals since January 1,
1601, 12:00 AM and can only be set by the system, it is the date when
the password was last set. From this the system can calculate when the
password expires (or indeed if it has expired).
A sysadmin can set a users pwdLastSet attribute to '0' (it is what
'User Must Change Password at Next Logon' does), this will cause the
user to have to change their password at next logon.
I repeat, how do you set or change the passwords ?
Rowland
PS, Please do not 'CC' me, just reply to the list.