similar to: Samba 4 Bad password lockout

Hi, I have a big problem. I see that samba 4 don't have bad lockout attempts and if samba don't have this, I cannot deploy samba 4. This setting is a security setting, it's very important. A virus attack can be modered by this setting (password crack) and the security bookfor IS from my compagny says : 11.1.3 User password management 11.1.3.1 Recommendations for access

Hi! I am currently using Samba4 Alpha13 but I have not been able to change a users password. I curently can add a user using ldbadd and a ldif file but I would like to know the recommended way of changing a users password. It would be nice if it could be done from the adminstrator account so that you do not need to know the original password. Thanks for the help! MS

Hello, I have successfully installed SAMBA4 Alpha12 as PDC. I added two machines. Ubuntu 11.04 Linux and Windows 7. They both can authenticate and log in to the machines. WHich is great. The problem comes when users trying to change their password. This is not working! It's constantly complaining for the complexity. However I used strong and absolutely different to any previous password.

Hi All, I am using Samba4 Alpha12, and i am trying to edit the password policy (which I believe is derived from the PDC's policy), but I am trying to figure out whether Samba4 can respond to GPOs. If It cannot, how would I define the password policy for the domain? Thanks.

Hello, When I tried to change the password policy on a samba 4 domain controller I get the following error. root at server01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# ./pwsettings.py --complexity=off Traceback (most recent call last): File "./pwsettings.py", line 25, in <module> import samba.getopt as options ImportError: No module named samba.getopt root

Greetings! Is there any way to to lockout a certain machine identified by its ip address after a fix number of bad logon attempts? I'm aware of account policy option "bad lockout attempts" but that would block the whole account and not just the machine. Have a sunny day! Ferdinand

Hi guys, I am so thrilled by samba 4 it makes me go to bed smiling J Here is my setup. Server ************ Centos 6.5 Samba 4.1.4 Clients ************* Windows XP, 7 & 8 Question: Is account lockout supported with samba4 ? I cannot seem to get the users accounts to lock when they type their passwords incorrectly. The rest of my GPO's work. Folder redirects work

Help!! I have been using tbdsam as a backend and I have been unable to get the pdbedit -P "bad lockout attempt" -C 3 to be enforced. When I set the attribute it seems that I can try to login as many times as I want. Any help out there? Terrance

First of all, I want to say I have been using Samba AD for two years now (since just before 4.0 went stable), and it is an amazing product. We've implemented Active Directory & Group Policy for almost 50 computers and 100 users. Unfortunately, we are now being forced into switching to Windows DCs because Samba does not have an account lockout feature. Citrix (stupidly) does not have

Hello, I have a samba 4.1.5. I have created OUs and linked GPO to OU for account lockout policies. Account Lockout Duration: 15min Account Lockout Threshold: 5 invalid attempts Reset Account lockout counter after: 15min I have created a test account and logged in with an incorrect password more than 5 times to a machine. but the test account never locks and the computer never prompts me that

After updating our Samba4 server from alpha17 to beta8 "samba-tool dbcheck" shows 24 "incorrect GUID" errors. What does it mean and what should i do to fix this? Thx

I recently am migrating my PDC from NT4 to Samba 3.025. Apparently due to a mismatch between the capitalization of the Windows account and the Unix account (Administrator vs administrator) I managed to lock the account before catching the discrepenacy. # pdbedit -v administrator Unix username: Administrator NT username: Administrator Account Flags: [ULX Bad password count

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there, I'm test the Account Lockout Threshold policy (Computer Setting) in samba4-alpha12 but dont work. I the user and Computer to OU and nothing. Work fine this policy? I need a password expiry warning too... any suggestion Thanks a lot -- Ivan Martinez -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG

Hi, im trying to setup a password policy with samba and openldap. while lockout works perfect on openldap it looks like it does not work with my samba. Ive set "sambaLockoutThreshold" to 3 and "sambaLockoutDuration" to -1 (lockout forever) within the Domain-Object in LDAP. So i expect whenever a windows user does 3 false logon attemps his samba account will be LOCKED

Hi all, My boss is still questioning me for an answer. I've searched thru this archive thru the beginning of the year as well as searched thru Google, but still haven't found the answer to the this question.. Is there a way in Samba to automatically disable/lockout an account if the user has tried to signon more than a set number incorrectly? As an example: if JDOE tries to sign into

> > > I do not understand, I will have a hostname and NetBIOS name > different? Yes. > > > > So > > -- Domain = SAMBA > > it'll be my name NETBIOS, and > > -- Realm = TPI.DOMAINE.CH-SERVER > > will my machine name + my domain? > > Thank you > ________________________________ > De : tms3 at tms3.com [tms3 at tms3.com] > Date

Hi All, I have setup samba 4.3.9-Ubuntu AD DC, I want to setup password policy and account lockout policy to all my domain users. How I can do that. Please somebody give me the steps. -- Vivek Patil Assistant Manager - IT Forgeahead Solutions vivek.patil at forgeahead.io *O* +91 (0) 20 66 44 5900 | *M *+91 9579 216 049 601 Zero One, Level 6, Mundhwa, Pune 411036, Maharashtra, India *W*

Hello I know there is a domain account lockout feature at: http://git.samba.org/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/s4-bwdPwdCount-01 A malicious user can type in incorrect password of any domain users. Then these users will be lockout (automatically or manually) in short time. Do we have any tools (equivalent to Event Viewer on Windows Server) for monitoring these actions

Hello, We are using the account lockout feature in Samba 4.2. Unfortunately my own account is being locked out overnight and I can't figure out where from :-( Is there a level of logging on a Samba4 DC I can use to record the source address of any authentication failures, be they with Kerberos or native LDAP? Thanks, -- Luke Bigum --- LMAX Exchange, Yellow Building, 1A Nicholas Road,

First off, I apologize if this is a duplicate - I had some issues with the first email I tried to join this list with! I'm currently using samba4 as an AD DC (domain and forest are both configured with the samba-tool command to be at the 2008_R2 functional level) for both Windows and Linux systems. I've got the default password settings set using the "samba-tool domain