similar to: Windows users can't change password 4.1.6

Hello Marc, W dniu 2015-01-22 o 20:17, Marc Muehlfeld pisze: > Hello Micha?, > > Am 22.01.2015 um 07:13 schrieb Micha? P??rolniczak: >> When GPO tells you to change password after 30days, or you want to >> change it; ... > > At first: You can't define password policies via GPO, because they have > to be interpreted by the domain controller(s) and Samba

Hi, here on the wiki https://wiki.samba.org/index.php/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F I read this: "Is it possible to set user specific password policies in Samba4 (e. g. on a OU-base)? Samba can't handle GPO restrictions. You have to use 'samba-tool domain passwordsettings' to change password policies.

Hello, I'd like to know if the following issues happen to you too. 1. Sysvol permissions After I edited a GPO with a user which is member of domain Admins, sysvolcheck runs on an error due to security settings of thisvedited GPO. Running sysvolreset makes it all for he again 2. GPO password policy We have a policy that defines a password change interval of 32 days. On our clients (windows

Hi list, Today, I spent most of the day figuring out why my password policies set via GPO are not applied on a domain level, just to find out that this is not one of the many occasions where Windows is the problem but it's really Samba, for a change. Apparently, password policies can only be changed using samba-tool and not via GPO. IMO, the FAQ is not very clear here.

As far as I understand Samba and the wiki in this regard, the Samba4 DC's password policy is no typical domain policy (no GPO). It can't be inherited by Windows clients. So I suspect the full story to be: - on the Unix side (DC and member server) the Samba password rules apply - on the Windows client side the inherited Windows POLICIES apply (as far as possible) In effect, if e.g.

Hello, I installed samba4 on an debian server with dc provisioning. If I create an default policy that is linked to the domain and set the Account Lockout Policy to e.g. 5 thresholds, it does not work. My question: I this Policy supported by samba and if it is supported how can I apply these. I also tried on other systems like openSUSE 13.2 and Ubuntu 14.04. And I also tried an

Hi once again my greetings I rewrite because I'm in the same situation but this time in debian 7 using samba4.0.6. The account lockout policy does not work, got help from some colleagues but nothing I fail to solve the problem, I have recommended using Zentyal 3.0 but it's my favorite distro is debian and do not feel right changing. This time I used a Windows 7 client and I

Hi list, well, i create a new gpo (rsat tools) and try to find password policies to define all stuff like time, complexity, etc but dont here where normaly are!..cant find from any gpo create password policies!...i personalize a search into gpo but nothing appears...normaly in windows ad this policies are in security settings.... any suggestion?

Hello, I'm unsing Ubuntu 14.4 Server and samba 4.1.6-Ubuntu. Everything works great but I somehow fail to switch off the password complexity requirements. It is not unlikely that this is because I'm very unexperienced with Windows. I've heard that the password-settings are always a bit tricky and I did exactly what the windows-tutorials say. I've tried gpresult for

Hi guys, I've been trying to work out how to set a GPO that allows certain Groups (Domain Users) a password expiry of 60 days and another group (Domain admins) an expiry of 30 days, but when looking through the Group Policy Manager I don't see how to achieve this. After looking around online I stumbled across the domain Functionality Level which if I understand means that I have to

W dniu 2015-01-27 o 18:42, Marc Muehlfeld pisze: > Hello Micha?, > > Am 27.01.2015 um 07:08 schrieb Micha? P??rolniczak: >> When changing password via Windows Logon it doesn't say it change it, it >> say that new password that I entered is not valid with password politic >> settings, and wasn't change. > Does it met the requirements? >

On Wed, Jan 28, 2015 at 2:09 AM, Micha? P??rolniczak < michal.polrolniczak at warp.org.pl> wrote: > > > W dniu 2015-01-27 o 18:42, Marc Muehlfeld pisze: > >> Hello Micha?, >> >> Am 27.01.2015 um 07:08 schrieb Micha? P??rolniczak: >> >>> When changing password via Windows Logon it doesn't say it change it, it >>> say that new password

Just to be sure: Your real realm does not end with .local, right? In an another thread it was not recommended to use TLD .local. The wiki says this also. Am 2. Februar 2015 12:25:46 MEZ, schrieb "Micha? P??rolniczak" <michal.polrolniczak at warp.org.pl>: >the smb.conf for samba 4.1.6-Ubuntu >[global] > workgroup = DOMAIN > realm = DOMAIN.LOCAL >

well, if I manually update the metadata via oddcast and enter "M? ire Brennan - I L??thair D??", then check the icecast2 status page, I see : Current Song: M?ire Brennan - I L?thair D? which I presume is correct. If I then open this stream with winamp, it displays as : M - I L?thair D?. If I look at the file properties, the vorbis winamp plugin tells me there are two comment

using samba 4.1.4 syslog have alot of those in log: [2014/07/22 13:24:12.22351, 0] ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug) ldb: ltdb: tdb(/usr/local/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=MYDOMAIN,DC=LOCAL.ldb): tdb_rec_read bad magic 0x0 at offset=516897176 Anything I can do to fix it?

Hello Tim, Am 15.01.2015 um 20:33 schrieb Tim: > I'd like to know if the following issues happen to you too. > > 1. Sysvol permissions > After I edited a GPO with a user which is member of domain Admins, sysvolcheck runs on an error due to security settings of thisvedited GPO. Running sysvolreset makes it all for he again What version of Samba are you running? I have 4.1.12 in

I expect you already did that but in case of... did you rebooted your Windows client to apply new Computer's GPO (or use gpupdate MS tool)? 2015-12-08 16:54 GMT+01:00 Ole Traupe <ole.traupe at tu-berlin.de>: > Hi, > > here on the wiki > > https://wiki.samba.org/index.php/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F >

I just can't reply to your question as I have not this information. I don't know how Samba works, I've got feelings about how it works : ) And as my MS world knowledge is just worst, I can't rely on it to tell you how Windows generate its passwords policy. How I think it works is: you configure password policy using samba-tool samba modifies the default domain policy (not tested,

We started with 4.1.0, there were few clients and Domain Controler worked fine. We started upgrading at 4.1.2 with: ./configure --enable-debug, make, make install on stoped samba4. We didn't notice any bad things. Curently we are using the 4.1.4, and can't be 100% but we started adding more and more people, but the dns dont respond allways. First it started with not responding anything (we

I would like to take users and theirs SIDs to new Samba 4 DC. Because from what I know if I create new domain with same name and IP as one before with same user names and passwords windows machines which use old domain accounts will create new ones accounts because SIDs won't match. Any ideas how can I do that? I understand that 'domain trust' will be broken when new DC with same