similar to: Samba 3 Password Ageing and History

Samba version 2.999+3.0cvs20020906-1 for Debian Somehow the Samba password is aging and is requiring a reset once a month for a couple of users. I can't see anything in the man pages to indicate that the passwords age, so how is Samba doing it, and how do I stop this behavior? One user is on Windows 2000 and the other on Windows XP. The Windows passwords are not aging and neither are

I've just found out that Samba (rather correctly) implements a nice and low password expiry date through the tdbsam backend, and I believe the "maximum password age" value. However, I can't, for the life of me, actually /set/ this thing. I've tried this: # pdbedit -u <username> -r -P "maximum password age" -C 100 And without the -r, and with various

Hi guys/girls, How are you ? I've been struggling to get my users' passwords to expire. My configuration is samba-3.0 running with the standard smbpasswd back-end. Everything that I can find on the web says I should set the following to expire my users passwords after 28 days.: pdbedit -v -P 'minimum password age' -C 300 pdbedit -v -P 'maximum password age' -C 2419200

I have a Domain controlled by a (Samba 2.2.2 upgraded to) Samba 2.2.3a PDC, with unix password sync = yes The PDC (on a Mandrake Linux 8.X box) does not use password ageing, and we don't want password ageing on our network. We have a mix of Windows 98, NT4 and 2000 client workstations. Unfortunately, some of the Windows 2000 users who log in to the domain have complained that Windows is

Hi! I tried to upgrade to Samba3 (RedHat Linux) but I couldn't find any doc about setting plain password backend. This is a small local fileserver and it doesn't need strong security. Can anyone help me? Another problem: now I use 2.2.8a with software-raid on IDE disks. I can read normally, but write is too small, and Samba sometimes says disk is full. May it incompatible between Samba

I have been trying to create some administration guidline to adding users and groups in a Samba 3.0 PDC. I have most of the task documented. The problem I run into is where can I set the attribute for a user to change their password on next logon. Any help is appreciated. Terrance Bey

Hello,, Is there anything I can do to our Samba servers to make Windows passwords longer than 8 characters work? Thanks. Our Samba servers use SERVER security, and authenticate against the same Windows 2K logon server (PDC) that serves all our Windows 2K & XP desktops. Any of us with a Windows network password less than or equal to 8 characters long can mount the Samba shares seamlessly,

Hi ! This is my firs post here. I've got a problem with password history policy -C 3 which doesn't work !! I set policy pdbedit -P "maximum password age" -C 777600 (90days) pdbedit -P "minimum password age" -C 691200 (80days) "user must logon to change password" -C 2 "password history" -C 3 On clients (XP PRO) some of people

Hi all, I'm trying to create a domain user in USRMGR.EXE. The samba account will have its property "Password must change" set to 0. this results in the user not being able to access shares if he has been never logged in before. smbclient will return NT_STATUS_PASSWORD_MUST_CHANGE after logon. in USRMGR.EXE, it is impossible to uncheck the checkbox for "password must

Hello all, I'm using Samba 3 with ldapsam_compat and i have a bunch of users (~ 150). I'm trying to find a way to set 'password must change' attribute to a given value to all users of my domain, so that all be forced to reset their passwords at the same time. Is there an "easy" way to do that, better than editing ldap database "by hand" or writing a custom

Hi I've searched the archives but did not spot this particular issue there. Config. RH8, Samba 3.0.2a. Auth via smbpasswd. I have a small office network where one of the accounts has had there password expire and resetting the password just went round in loops. I've tried removing the password synching from smb.conf and removing the user from smbpasswd and re-creating their account

Greetings ... A quick question more to confirm a few things reguarding SMB passwords, which I hope might be able to look at for password aging. I saw some discussion on samba-tech list, but nothing conclusive. LM and NT hashs don't have a salt? Do they? ... In other words, a password "password" LM hashed, always comes out as "E52CAC67419A9A224A3B108F3FA6CB6D" not

Hi, I've seen many people complaining winbind can't handle expired Windows AD accounts and doesn't ask to change them. Is it something people can't just configure properly or it is not supported by design? Have anyone had luck getting it working properly? Thanks!

Hi, there is a "X" value for the acount flags in smbpasswd ... it means no password expiry! I found it on passdb/passdb.c. If it work?s, maybe I don?t no! Also the password expire time ist hard coded in passwd.c too ... set to infinity. Take a look at the passwd.c code! Regards, Thomas Gesendet von: samba-admin@lists.samba.org An: <samba@lists.samba.org> Kopie:

I've searched google and the samba archives to no avail (appologies if I've missed something), so I will ask the community directly: I am trying to convert a fully populated smbpasswd file to the tdbsam backend: # pdbedit -i smbpasswd:./smbpasswd -e tdbsam:./passdb.tdb This seems to work, on the surface, but upon inspection I find that # pdbedit -Lw username

Hi, We are planning to move all of our win2k server (currenty around 50!) alongwith AD to Linux, we are planning to use LDAP based samba domain controllers for authentication and file/print serving. We are doing a pilot and things are fine till now, just one simple problem, what should we do with our password policy, we have three restrictions relating passwords minimum password length password

I am trying to turn on password history using an ldap backend. I can see the sambaPasswordHistory entry set to all "0"s in Ldap. I tried to turn on password history with pdbedit -P "password history" -C 3 and get back that it was set: [root]# pdbedit -P "password history" account policy value for password history is 3 However, when I try to reset a user password

When I run the command "pdbedit -L -v" I get the following error message along with some data: [root@pluto smbd]# pdbedit -L -v init_sam_from_ldap: Failed to get password history for user we371a --------------- Unix username: darryl NT username: darryl Account Flags: [U ] User SID: S-1-5-21-1338197941-1270242922-2978898711-3548 Primary Group

hi everyone just a quickie to devel maybe. I'm looking at some bits: devtoolset-4-elfutils-libelf-0.163-2.el7.x86_64 VS elfutils-0.166-2.el7.x86_64 isn't devtool ageing? Could this be the case with more packages? regards, L.

What are my options for implementing password aging using samba as my PDC ? I can set the users Linux password to expire, but it doesn't seem to propagate to their samba passwords. I absolutely need this functionality. Is OpenLDAP the answer? Joseph Morin