search for: nt_status_password_restriction

...mba DC to existing windows domain using: samba-tool domain join ***.** DC -U"***\admin" --dns-backend=BIND9_DLZ It has stopped on Adding DNS account CN=dns-DC... with the below error. ERROR(runtime): uncaught exception - (-1073741716, 'SetUserInfo2 level 26 for [dns-DC] failed: NT_STATUS_PASSWORD_RESTRICTION') when the BIND9_DLZ is not specified the join is finished without any errors. How can I join with Bind backend? Thanks, Tom

...t; >> > It has stopped on >> > >> > Adding DNS account CN=dns-DC... >> > >> > with the below error. >> > >> > ERROR(runtime): uncaught exception - (-1073741716, 'SetUserInfo2 level 26 for [dns-DC] failed: NT_STATUS_PASSWORD_RESTRICTION') >> >> This would seem to mean the password isn't complex enough, but the >> password should be random, so is the Windows domain set to have >> extremely complex passwords ? >> >> What version of Samba are you running ? >> >> And on what OS ?...

On Mon, 2019-09-23 at 09:25 +0200, Marco Gaiarin via samba wrote: > Mandi! tomek82 via samba > In chel di` si favelave... > > > ERROR(runtime): uncaught exception - (-1073741716, 'SetUserInfo2 level 26 for [dns-DC] failed: NT_STATUS_PASSWORD_RESTRICTION') > > You have a 'check password script' enabled in smb.conf? If I read the thread correctly, it was against a windows DC. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Develope...

...quot;VDP\kalaghan" domain user but when I try to change his password with the passwd command, I?ve got the next error messages in /var/log/messages: Jan 3 14:55:01 fedogat pam_winbind[2869]: user 'VDP\kalaghan' granted access Jan 3 14:55:20 fedogat pam_winbind[2869]: request failed: NT_STATUS_PASSWORD_RESTRICTION, PAM error was 4, NT error was NT_STATUS_PASSWORD_RESTRICTION Jan 3 14:55:20 fedogat pam_winbind[2869]: internal module error (retval = 4, user = `VDP\kalaghan' The password I?m using is more than eight characters and I?ve disabled the GPO in AD which concerns the complexity of password. My...

...er1. Changing password for user1 (current) NT password: New UNIX password: Retype new UNIX password: passwd: System error ##### /var/log/messages #### Oct 7 03:00:37 localhost pam_winbind[25244]: user 'user1' granted access Oct 7 03:00:45 localhost pam_winbind[25244]: request failed: NT_STATUS_PASSWORD_RESTRICTION, PAM error was 4, NT error was NT_STATUS_PASSWORD_RESTRICTION Oct 7 03:00:45 localhost pam_winbind[25244]: internal module error (retval = 4, user = `user1' I try to let my users to change to their own password So have anyway to change password on Active Directory in linux box command l...

Hi! I've been trying to get password changes to work from a SuSE machine to an AD server. Authentication works fine in AD mode, so at least that bit is correct. When trying to change the password, I get PAM error 4 back. Checking in the logs, I see that winbind fails with the error NT_STATUS_PASSWORD_RESTRICTION. From Microsoft's documentation, I can read that this means that there is some password policy that's rejecting the new password. But I cannot find any such policy on the server, so I'm wondering if this can be caused by something else? I'm also a bit confused as to how I can...

...tely this also didn't seem to work: sudo samba-tool user password --newpassword="$NEWPASSWORD" -U "Administrator" Password for [OSSL\Administrator]: ERROR: Failed to change password : (-1073741716, "samr_ChangePasswordUser3 for 'OSSL\\Administrator' failed: NT_STATUS_PASSWORD_RESTRICTION") I would really appreciate any help and advice anybody can offer regarding this matter as I am now stuck at this point :) Thanks Stephen Ellwood

...work: > > sudo samba-tool user password --newpassword="$NEWPASSWORD" -U > "Administrator" > Password for [OSSL\Administrator]: > ERROR: Failed to change password : (-1073741716, > "samr_ChangePasswordUser3 for 'OSSL\\Administrator' failed: > NT_STATUS_PASSWORD_RESTRICTION") > > I would really appreciate any help and advice anybody can offer > regarding this matter as I am now stuck at this point :) > > Thanks > Stephen Ellwood > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: ht...