search for: myadus

I want something like so on login Last login: Wed Feb 1 10:47:53 Password Expires: Wed March 1 00:00:00 [myaduser at machine ~]$ I just want them to know when their password expires. On Wed, Feb 1, 2017 at 9:39 AM, mathias dufresne <infractory at gmail.com> wrote: > Plop, > > You'd like to modify .bashrc to auto-disconnect user with expired > password? I thought modern tools to use...

Or maybe better like so on login Last login: Wed Feb 1 10:47:53 Password Expires in 28 days [myaduser at machine ~]$ On Wed, Feb 1, 2017 at 12:10 PM, Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > I want something like so on login > > Last login: Wed Feb 1 10:47:53 > Password Expires: Wed March 1 00:00:00 > [myaduser at machine ~]$ > > I just want them to know...

On 01/02/2017 19:12, Jeff Sadowski wrote: > Or maybe better like so on login > > Last login: Wed Feb 1 10:47:53 > Password Expires in 28 days > [myaduser at machine ~]$ Something like this? warn_pwd_expire Defines number of days before pam_winbind starts to warn about passwords that are going to expire. Defaults to 14 days. https://www.samba.org/samba/docs/man/manpages/pam_winbind.8.html

...ion in ~${USER}/.passwdexp but I don't know how to write the ldapsearch to do this. On Wed, Feb 1, 2017 at 12:12 PM, Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > Or maybe better like so on login > > Last login: Wed Feb 1 10:47:53 > Password Expires in 28 days > [myaduser at machine ~]$ > > > > On Wed, Feb 1, 2017 at 12:10 PM, Jeff Sadowski <jeff.sadowski at gmail.com> > wrote: > >> I want something like so on login >> >> Last login: Wed Feb 1 10:47:53 >> Password Expires: Wed March 1 00:00:00 >> [myaduser at m...

...om /etc/samba/smb.conf >> Processing section "[generic]" >> Loaded services file OK. >> Server role: ROLE_DOMAIN_MEMBER Hmm, I also have 'server role = standalone server' in the config file, but I guess that has been overridden. I have run 'net ads join -U myADUser' when REALM=AD.WISC.EDU . It looks like 'net ads join' adds a machine principal into the AD.WISC.EDU kerberos database and into the local machine's keytab. What other config does it change? Does 'net ads join' also override the 'server role =' in smb.conf and t...

...be nice if it works... 2017-02-02 13:47 GMT+01:00 Brian Candler via samba <samba at lists.samba.org>: > On 01/02/2017 19:12, Jeff Sadowski wrote: > >> Or maybe better like so on login >> >> Last login: Wed Feb 1 10:47:53 >> Password Expires in 28 days >> [myaduser at machine ~]$ >> > Something like this? > > warn_pwd_expire > > Defines number of days before pam_winbind starts to warn about > passwords that are going to expire. Defaults to 14 days. > > https://www.samba.org/samba/docs/man/manpages/pam_winbind.8.html >...

...'server role' to a machine you have joined to a domain isn't going to make it a standalone server. The definition of a 'standalone server' is a server that is not connected to a domain and holds it own database of users, groups etc. > > I have run 'net ads join -U myADUser' when REALM=AD.WISC.EDU . > > It looks like 'net ads join' adds a machine principal into the AD.WISC.EDU > kerberos database and into the local machine's keytab. What other config does > it change? It probably creates a keytab. > > Does 'net ads join' a...

my smb.conf looks as follows. [global] security = ads realm = AD.MYDOMAIN.TLD workgroup = AD idmap config * : backend = tdb idmap config * : range = 2000-7999 idmap config MIND:backend = ad idmap config MIND:schema_mode = rfc2307 idmap config MIND:range = 8000-9999999 winbind nss info = rfc2307 winbind use default domain = yes winbind enum users = yes winbind

Hi Rowland, Below is output of testparm. Samba is set up as standalone server. # testparm Load smb config files from /etc/samba/smb.conf Processing section "[generic]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions [global] realm = PHYSICS.WISC.EDU server string = %h server server role =