similar to: Domain Functionality Level and GPO password policies

Hi, here on the wiki https://wiki.samba.org/index.php/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F I read this: "Is it possible to set user specific password policies in Samba4 (e. g. on a OU-base)? Samba can't handle GPO restrictions. You have to use 'samba-tool domain passwordsettings' to change password policies.

Hello, I installed samba4 on an debian server with dc provisioning. If I create an default policy that is linked to the domain and set the Account Lockout Policy to e.g. 5 thresholds, it does not work. My question: I this Policy supported by samba and if it is supported how can I apply these. I also tried on other systems like openSUSE 13.2 and Ubuntu 14.04. And I also tried an

Hi list, Today, I spent most of the day figuring out why my password policies set via GPO are not applied on a domain level, just to find out that this is not one of the many occasions where Windows is the problem but it's really Samba, for a change. Apparently, password policies can only be changed using samba-tool and not via GPO. IMO, the FAQ is not very clear here.

Hello, When PDC was installed I remember that everybody could change thair passwords after first 24h after password reset via admin console. (I remamber that I was searching for this and even if GPO was min 0 days for changing password you had to wait) Anyway... Now noone is able to change password. When GPO tells you to change password after 30days, or you want to change it; typing old

Hi once again my greetings I rewrite because I'm in the same situation but this time in debian 7 using samba4.0.6. The account lockout policy does not work, got help from some colleagues but nothing I fail to solve the problem, I have recommended using Zentyal 3.0 but it's my favorite distro is debian and do not feel right changing. This time I used a Windows 7 client and I

Hi list, well, i create a new gpo (rsat tools) and try to find password policies to define all stuff like time, complexity, etc but dont here where normaly are!..cant find from any gpo create password policies!...i personalize a search into gpo but nothing appears...normaly in windows ad this policies are in security settings.... any suggestion?

Hello, I'd like to know if the following issues happen to you too. 1. Sysvol permissions After I edited a GPO with a user which is member of domain Admins, sysvolcheck runs on an error due to security settings of thisvedited GPO. Running sysvolreset makes it all for he again 2. GPO password policy We have a policy that defines a password change interval of 32 days. On our clients (windows

As far as I understand Samba and the wiki in this regard, the Samba4 DC's password policy is no typical domain policy (no GPO). It can't be inherited by Windows clients. So I suspect the full story to be: - on the Unix side (DC and member server) the Samba password rules apply - on the Windows client side the inherited Windows POLICIES apply (as far as possible) In effect, if e.g.

Hello, I'm unsing Ubuntu 14.4 Server and samba 4.1.6-Ubuntu. Everything works great but I somehow fail to switch off the password complexity requirements. It is not unlikely that this is because I'm very unexperienced with Windows. I've heard that the password-settings are always a bit tricky and I did exactly what the windows-tutorials say. I've tried gpresult for

I have a samba dc which i recently upgraded to 4.6.4. I was looking at updating the functional level as it currently returns: Forest function level: (Windows) 2000 Domain function level: (Windows) 2000 Lowest function level of a DC: (Windows) 2000 There is only a single DC (this host). According to the documentation 2000 isn’t even supported anymore:

Hello, after 2 month of being offline, I finally got a working internet connection again and can announce myself back to continue working on HowTos in the Wiki. :-) During the last time, I did a lot of research about the possibilities and limitations of restoring deleted objects in a Samba AD. I think it is a very helpfull topic for administrators. The results I wrote down in a new HowTo:

HI!! I have one question, in samba 4.8.2 , --forest-level and --domain-level is worked 2012/2012 R2 ? samba-tool domain level --help --forest-level=FOREST_LEVEL                         The forest function level (2003 | 2008 | 2008_R2 |                         2012 | 2012_R2)   --domain-level=DOMAIN_LEVEL                         The domain function level (2003 | 2008 | 2008_R2 |

Good day guys, I hope all is well on your side. We are looking at implementing the latest stable version of Samba4 to function as a (secondary) domain controller in an existing Active Directory environment that is currently managed by an existing single Windows Server 2016 server. Aside from fairly easily-addressed sysvol replication challenges - looking at the official Samba documentation,

El 12/06/15 a les 14:47, joseph-andre Guaragna ha escrit: > official documentation on samba describe this situation: > > https://wiki.samba.org/index.php/Raising_the_functional_levels > Meilleures salutations / Best regards, There's also this issue: https://lists.samba.org/archive/samba/2013-July/174639.html (even if time synchronization seems to work fine). Bye -- Luca

On 02/01/2017 10:58 AM, Andrew Bartlett via samba wrote: > The major issue at this point relates to the schema. Your domain > functional level is a different thing to your server functional level, > so you can keep the domain functional level at 2008R2, which is what > Samba has reasonable support for. As this week I also looked into the functional levels that samba supports, I must

G'day All, We are trying to raise the level of our test samba4 DCs. Our windows dude wants the Domain level to be 2012_R2. I am referencing: https://wiki.samba.org/index.php/Raising_the_Functional_Levels#Supported_Functional_Levels We managed to get both domain and forest levels to 2008 R2 - forest was 2003. However, when we try to raise further, we are getting what seems to be a

Hi! In the samba wiki there's this page: https://wiki.samba.org/index.php/Raising_the_Functional_Levels which basically says that the maximum supported functional level is 2008_R2, and that 2012 (and 2012_R2) are included but not supported. This page mentions maximum samba version 4.4 and has been modified in 2017 (besides some formatting changes). What's the current situation? Also,

Thanks for answers. Why do you have this option if it is not working yet? Just out of curiosity... Regards; On 22-05-2018 12:52, Rowland Penny via samba wrote: > On Tue, 22 May 2018 12:39:53 -0300 > Carlos via samba <samba at lists.samba.org> wrote: > >> HI!! >> >> I have one question, in samba 4.8.2 , --forest-level and >> --domain-level is worked

Dear all, My , samba-tool domain level show shows me it is W2003: [root at s4master ~]# samba-tool domain level show Domain and forest function level for domain 'DC=tplk,DC=loc' Forest function level: (Windows) 2003 Domain function level: (Windows) 2003 Lowest function level of a DC: (Windows) 2008 R2 Can I raise without issues to W 2008 R2? Or should I stay with 2003? Greetings

Am 17.03.2015 um 15:59 schrieb Sam: > I have read about it but I try to do that : > https://lists.samba.org/archive/samba/2013-May/173079.html > unfortunately there is not a lot of details on how to do > accurately...:-\ > The actual forest and domain level on the 2012 is still on 2008R2... Can you check, what schema version you're having: