search for: pwdproperties

...'man smb.conf' on 'kdc', turns this up: gpo update command (G) This option sets the command that is called to apply GPO policies. The samba?gpupdate script applies System Access and Kerberos Policies to the KDC. System Access policies set minPwdAge, maxPwdAge, minPwdLength, and pwdProperties in the samdb. Kerberos Policies set kdc:service ticket lifetime, kdc:user ticket lifetime, and kdc:renewal lifetime in smb.conf. Apart from the wiki page (which dates back to 2014), that is it. Let me look into this further. Rowland

Ahem, again revising docs... I've not found a place where there's a ist of policy applied if i set: apply group policies = yes There's something like that? they are exactly the policy in: samba-tool domain passwordsettings show Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia''

...21:54 +0800, markmak@csl1010.com wrote: > I just install the Samba4 Alpha 5. Everyone is OK. I want to change > the password policy but no any utility found. Who can help me on > this? > > In the default setting, the password policy is a complex mode. Currently this is set in the pwdProperties of the domain (ie dc=foo,dc=com) The sane way to deal with this would be a short python script to manipulate this. Please file a bug in bugzilla, so I don't forget. Also, while Samba4 is still in alpha releases, I don't get to the samba@ list often, so best to mail samba-technical@ for t...

On 01/10/2020 00:23, Jason Keltz via samba wrote: > > Remy, > > On the domain controller (samba-ad-dc), I have in the config: kdc:user > ticket lifetime = 24 I do not recognise that smb.conf option, could this be another freebsd change that was never sent upstream or, if it was, it was rejected ? > > When I login to the client (which is using pam_winbind module), I have

You guys mix to things. > AFAIK is the 'privileges' that are host-specific. Is correct. >the policies are on the domain (in the LDAP data, > the root DN, look at them!). Yes, but only the GPO policies and these are not applied to the samba server. And because of that, samba-tools password settings needs to be set on every DC. Greetz, Louis > -----Oorspronkelijk