Displaying 4 results from an estimated 4 matches for "validatepassword".
2017 Oct 25
2
'check password script' and Join...
...re:
> > PS: and domain members? How they enforce passwords policies? Directly
> > on AD DC, i suppose... but i'll ask. ;-)
> They don't ask the DC for the choice of local user passwords as far as
> I'm aware. There is an API to check if a password is OK (SAMR
> ValidatePassword), but I've not seen it called for that, but I've also
> not really been looking.
No, i was not clear. I don't mean ''password quality'', but ''password
age''.
In NT/LDAP/smbldap-tools mode, i used to populate shadow account LDAP
data, ''copy...
2017 Oct 24
3
'check password script' and Join...
Mandi! Rowland Penny via samba
In chel di` si favelave...
> The password settings are related to the DC and by default you cannot
> set or change a password if it isn't complex enough
Ok.
>, you do not need to use an external script.
Ahem, someone out there need it. ;-)
This mean that, if i keep a 'check password script', i could also hit
some trubles on, eg,
2017 Oct 24
0
'check password script' and Join...
...t; Right? Thanks.
>
>
> PS: and domain members? How they enforce passwords policies? Directly
> on AD DC, i suppose... but i'll ask. ;-)
They don't ask the DC for the choice of local user passwords as far as
I'm aware. There is an API to check if a password is OK (SAMR
ValidatePassword), but I've not seen it called for that, but I've also
not really been looking.
Thanks for asking for clarification, I hope this puts you at ease.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
S...
2017 Oct 25
0
'check password script' and Join...
...domain members? How they enforce passwords policies?
> > > Directly on AD DC, i suppose... but i'll ask. ;-)
>
> > They don't ask the DC for the choice of local user passwords as far
> > as I'm aware. There is an API to check if a password is OK (SAMR
> > ValidatePassword), but I've not seen it called for that, but I've
> > also not really been looking.
>
> No, i was not clear. I don't mean ''password quality'', but ''password
> age''.
>
> In NT/LDAP/smbldap-tools mode, i used to populate shadow acc...