search for: surprisinlgy

Now it becomes really interesting: I just tested what happens when I set "the user must change the password on the next login". Then, on my Samba domain controller, I used kinit <the user name> and entered the current password. Surprisinlgy, I got the message from Kerberos "Password for the user is expired. You must change it now." And I can change the password! afterwards, when I go back to "Active Directory Users and Computers", the tick mark at "user must change password at next login" is gone. So...