similar to: User policy in samba

Hi, here on the wiki https://wiki.samba.org/index.php/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F I read this: "Is it possible to set user specific password policies in Samba4 (e. g. on a OU-base)? Samba can't handle GPO restrictions. You have to use 'samba-tool domain passwordsettings' to change password policies.

On 11/21/2017 4:34 AM, lists via samba wrote: > Hi, > > On 21-11-2017 4:40, Anantha Raghava via samba wrote: >> >> /*Password Policies*/ >> >> Password policies are not getting enforced on the clients. Initially >> we thought that we have to set those policies using "samba-tool user >> passwordsettings" and not on Windows GPO. As this was

Hi, We are running Samba-AD and all things are working absolutely fine. However, two very specific issues observed one related to Windows Clients (Members) automatically synchronizing the time with PDC emulator and second password policies are not getting enforced. /*Time Synchronization:*/ Normally, in totally Windows environment, when adding a windows PC (Or server) to a domain as a

On 27.08.2023 23:45, Andrew Bartlett wrote: > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >> Hi folks, >> >> I just wonder why it is not possible to set domain password policies >> with GPO, using the Windows RSAT Group Policy Manager? For most >> other >> settings, using GPOs through RSAT works. >> >> For somebody who sets

On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: > Hi folks, > > I just wonder why it is not possible to set domain password policies > with GPO, using the Windows RSAT Group Policy Manager? For most > other > settings, using GPOs through RSAT works. > > For somebody who sets up a Samba AD DC infrequently, this is a huge > trap. There should be a

On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: > On 27.08.2023 23:45, Andrew Bartlett wrote: > > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: > > > Hi folks, > > > I just wonder why it is not possible to set domain password > > > policieswith GPO, using the Windows RSAT Group Policy Manager? > > > For

On Wed, 30 Aug 2023 09:49:05 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > > On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: > >> On 27.08.2023 23:45, Andrew Bartlett wrote: > >>> On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >

You guys mix to things. > AFAIK is the 'privileges' that are host-specific. Is correct. >the policies are on the domain (in the LDAP data, > the root DN, look at them!). Yes, but only the GPO policies and these are not applied to the samba server. And because of that, samba-tools password settings needs to be set on every DC. Greetz, Louis > -----Oorspronkelijk

On 30.08.2023 11:58, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 09:49:05 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 29.08.2023 21:38, Andrew Bartlett via samba wrote: >>> On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: >>>> On 27.08.2023 23:45, Andrew Bartlett wrote: >>>>>

On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: >> On 27.08.2023 23:45, Andrew Bartlett wrote: >>> On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >>>> Hi folks, >>>> I just wonder why it is not possible to set domain password >>>> policieswith GPO,

On Wed, 30 Aug 2023 12:40:08 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 30.08.2023 11:58, Rowland Penny via samba wrote: > > On Wed, 30 Aug 2023 09:49:05 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > >>>

Hi Folks, I am relative new to samba 4, not so new to Samba, but I have a problem with password policies. So I set a password policy (Maximum password age) in RSAT for the Default Domain Policy, but this policy was not applied to my domain, even after the command gpupdate /all and after rebooting the samba server. (I am using samba version 4.9.0) So I discovered in the samba server that the

On 30.08.2023 16:21, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 12:40:08 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 30.08.2023 11:58, Rowland Penny via samba wrote: >>> On Wed, 30 Aug 2023 09:49:05 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> On

On Wed, 30 Aug 2023 18:56:48 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 30.08.2023 16:21, Rowland Penny via samba wrote: > > On Wed, 30 Aug 2023 12:40:08 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 30.08.2023 11:58, Rowland Penny via samba wrote: > >>> On

On 30.08.2023 19:17, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 18:56:48 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 30.08.2023 16:21, Rowland Penny via samba wrote: >>> On Wed, 30 Aug 2023 12:40:08 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> On

As far as I understand Samba and the wiki in this regard, the Samba4 DC's password policy is no typical domain policy (no GPO). It can't be inherited by Windows clients. So I suspect the full story to be: - on the Unix side (DC and member server) the Samba password rules apply - on the Windows client side the inherited Windows POLICIES apply (as far as possible) In effect, if e.g.

Hi, I seting up a samba4 server for testing. With the Remote Server Administration Tools I could manage to create users and policys. When I try to change a password for my testusers, I get an emergency about the password policy. But in the domain group policy it isn't set? I change the unset policy to deactivate but nothing changed. Bye Gregor --

Hi! I think is ok(used gpo for  password policy) , because i read this it, but.... https://wiki.samba.org/index.php/Samba_4.8_Features_added/changed#KDC_GPO_application Regards; On 11/02/2019 19:21, Viktor Trojanovic via samba wrote: > The pw policy GPO is applied to the domain controller itself. That > only works if the DC is a windows machine, though. So, no, no > workaround

Dear Andrew, As per your suggestion , I have attached the gdb log of the samba and smbd process log running in the single server mode. Also when I noted in the perf top, libndr.so consumes the maximum cpu. I noticed that it happens soon after sometime the samba process is started and the CPU is filled up. Since the samba process occupies 100% atleast two or more CPUs out of 8 CPU , the clients

Hello, I'm unsing Ubuntu 14.4 Server and samba 4.1.6-Ubuntu. Everything works great but I somehow fail to switch off the password complexity requirements. It is not unlikely that this is because I'm very unexperienced with Windows. I've heard that the password-settings are always a bit tricky and I did exactly what the windows-tutorials say. I've tried gpresult for