similar to: sambaPwdLastSet=0 vs sambaPwdMustChange=0

Hi There, I have setup the following SAMBA + LDAP, Domain Controller, with smbldap-tools-0.9.8 SLES - 11.2 (For Samba, Separate System) samba-3.6.3-0.18.3 SLES - 10 (For LDAP Backend, Separate System) openldap2-2.3.19-18.7 The above setup is working fine and the password policies are all fine. Problem - If the user changes the password at the Windows Client sambaPwdLastSet changes date to

I am adapting a script that needs to know whether a user needs to change their password on the next login from NT to AD with Samba. I have tried "samba-tool user getpassword <user> --attributes PwdMustChangeNow", but that's not giving me anything useful - just a DN, and "Got password OK" (even on users that do need the password to change). Is there another line I

I have been having some problems since I updated from Samba 3.0.23 to 3.0.25b. I have installed the latest version of smbldap-tools but I am still not able to make certain changes to a user's account. I have created a new user named JROLFE. After I set up a new user, I will set it so they are required to change their password when they first login. I usually do this through LDAP Account

Hi there, i got into some trouble after updating my samba installation to 3.0.27a. My installation uses Samba-3.0.27a,OpenLDAP-2.2.13,smbldap-tools-0.9.2 as a PDC NT4-domain.Originally I used the installation-guide from smbldap-tools and everything worked fine. I also limited the access to LDAP as told in the installation-guide with no problems. After updating to 3.0.27a i realized that when

> net sam set pwdmustchangenow (username) yes what does you mean? I need a GUI that allow users change own password thanks Pol

Hi People! I use pam_winbind for authentication in my computer workstation using Debian Lenny 5.0, Stable Version. I configure my user with this option "sambaPwdMustChange: 0", and I logon in GDM without asking to change password. Who knows what can be? I use Samba PDC with Heimdal Kerberos, but, I configure PAM with only pam_winbind for tests... Client versions: ii

When samba password has been expired, user are force to change their password from client WS. Samba will modify sambaPwdMustChange attribute and the value seems always "2147483647", this not happen when changin password with smbpasswd. >From where samba calculate value for "sambaPwdMustChange"? is it constant? Is it possible to specify different value? Tks.

Hi I have a PDC/BDC samba/ldap environment. PDC: samba 3.0.24 slapd 2.3.30 BDC: samba 3.2.5 slapd 2.4.11 Ldap replication is working fine, but I have noticed two issues 1- when a windows user change password on BDC, sambaPwdMustChange and sambaPwdCanChange is not synced on PDC (using ldap passwd sync = yes and unix password sync = no) 2- when using 'net sam set pwdmustchange' on

Hi, i have samba 3.0.10 installed with LDAP. I noticed few days ago that my adminsitrator account has expired. I think it's because of the sambaPwdMustChange field of LDAP. I changed the passwd now i have the value 1108741705 in it. What does it mean (when will i be prompted again to change my passwd) and do i have to put in this field so that the password will never expire ? Thanks for

I'm using samba 3.0.6 on fedora core 1 with LDAP enabled and smbldap-tools. When I change a user password with smbldap-passwd <username>, i find that sambaPwdMustChange attribute is correctly set to 30 days later as set in smbldap_conf. But, if I try to change password from any Win2000 or WinXP client with CTRL+ALT+CANC --> CHANGE PASSWORD i notice that sambaPwdMustChange attribute

So I get a phone call about my companie's controler not being able to log into samba. About two weeks ago we migrated from Win2k Server to Samba running on LDAP. What would be the default value that sambaPwdMustChange would be incremented? This is NT Time Right (1 unit for every 100 ms from 1600 right?) I just had to bump everybody what I'm guessing is three weeks, but I need to know

Dear Samba friends, >From the information I have found on the internet, I understood that sambaPwdMustChange and sambaLogoffTime are obsolete. When there is no use for these attributes in the future, I would recommend to remove them from the samba scheme. What would be the procedure to follow to remove these attributes and to update the ldap database? -- Met vriendelijke groeten, With kind

On Wed, 23 Jan 2019 10:44:01 -0800 Luke Barone via samba <samba at lists.samba.org> wrote: > I am adapting a script that needs to know whether a user needs to > change their password on the next login from NT to AD with Samba. > > I have tried "samba-tool user getpassword <user> --attributes > PwdMustChangeNow", but that's not giving me anything useful -

Perfect, I got the parameter I needed! I just checked for `msDS-UserPasswordExpiryTimeComputed`, and if it's 0, then I know the password needs to change on the next login! Thanks! I honestly had no idea what the attributes were, but now I see they're the attributes that are in Active Directory. On Wed, Jan 23, 2019 at 11:19 AM Rowland Penny via samba < samba at lists.samba.org>

hello all :) what's "hack" to force users to change own password from samba file server? is there a GUI to change the password? any idea? thanks Pol

Hi, I'm trying to use the sambaUserWorkstations option to allow users to log on certain computers only. This option looks great... In fact it looks now a lot better than the 'ldap filter' one than was deprecated with samba 3.0.20... The fact is, if the sambaUserWorkstations option works well with machine names, it doesn't seem to work when specifying groups of machines.

Hi, I have an ldap provider and consumer that appear to work correctly, EG, new users are sync'ed and a search on either server (ldapsearch -x -b 'dc=example,dc=com' '(cn=djohn)') returns an oject. However when an XP user attempt to connect to the consumer server the authentication fails: [2011/06/10 16:11:21, 0] lib/util_sock.c:write_data(1059) [2011/06/10 16:11:21, 0]

Hi, we have a samba/ldap domain. After upgrading to versions greater than 3.0.24, there are problems with the timestamps which are correct set in the LDAP tree. Here are 2 examples: --------------------------------------------------- Example 1: Password can change=not empty LDAP: sambaPwdLastSet: 1205744729 sambaPwdMustChange: 1307828342 sambaPwdCanChange: 1192276342 sambaKickoffTime: 1228086000

Hi, I could use some confirmation on my approach to configuring my BDC. I want the user to be able to access shares on the BDC and have their domain credentials stamped on any files they create. I do not want to add domain users to the /etc/passwd file. At the moment users can authenticate onto the domain but once they try and access a share on the BDC, these XP users get a dialogue box asking

I have an strange issue with ldap passwd sync = only on FreeBSD 6.1 with Samba 3.0.25a + OpenLDAP 2.3.37 I have the OpenLDAP smbk5pwd overlay which successfuly synchronizes LM and NT passwords: $ ldappasswd -D 'cn=sambamgr,ou=managers,o=stars' -w sambapass -s secret1 'uid=lacoste,ou=Users,ou=Accounts,o=stars' Result: Success (0) My OpenLDAP auditlog file confirms that smbk5pwd