similar to: passwd complexity

Hello Marc, W dniu 2015-01-22 o 20:17, Marc Muehlfeld pisze: > Hello Micha?, > > Am 22.01.2015 um 07:13 schrieb Micha? P??rolniczak: >> When GPO tells you to change password after 30days, or you want to >> change it; ... > > At first: You can't define password policies via GPO, because they have > to be interpreted by the domain controller(s) and Samba

Hello, What are the domain password complexity rules for Samba4? Maybe I am just blind, but I am having a hard time finding this info in the documentation or on Google. Thanks, -James Crouch

W dniu 2015-01-27 o 18:42, Marc Muehlfeld pisze: > Hello Micha?, > > Am 27.01.2015 um 07:08 schrieb Micha? P??rolniczak: >> When changing password via Windows Logon it doesn't say it change it, it >> say that new password that I entered is not valid with password politic >> settings, and wasn't change. > Does it met the requirements? >

I am running Samba 4.1.4 on Centos 6.5. All documentation that I can access suggest that an uppercase letter is mandatory for the domain administrator. I would like to make this (at least 1 uppercase alphabet) mandatory for ALL users. Is there a way to do it? Best Regards, Dipan

On Wed, Jan 28, 2015 at 2:09 AM, Micha? P??rolniczak < michal.polrolniczak at warp.org.pl> wrote: > > > W dniu 2015-01-27 o 18:42, Marc Muehlfeld pisze: > >> Hello Micha?, >> >> Am 27.01.2015 um 07:08 schrieb Micha? P??rolniczak: >> >>> When changing password via Windows Logon it doesn't say it change it, it >>> say that new password

Just to be sure: Your real realm does not end with .local, right? In an another thread it was not recommended to use TLD .local. The wiki says this also. Am 2. Februar 2015 12:25:46 MEZ, schrieb "Micha? P??rolniczak" <michal.polrolniczak at warp.org.pl>: >the smb.conf for samba 4.1.6-Ubuntu >[global] > workgroup = DOMAIN > realm = DOMAIN.LOCAL >

Hi, Is it possible to test our AD for weak passwords? We have set max password age, and password complexity etc. However, we would like to know that the passwords that are CURRENTLY still in the system are good or weak. Perhaps some kind of tool to test dictionary passwords etc, but preferably locally on the /var/lib/samba databases to not lockout the accounts due to too many failed

This is a great tutorial. I have installed samba4.1.9 on a centos 6.5 server and created Ad users with roaming profiles successfully. Windows 7 client joined the new domain; user authentication, login process is trouble free and user can save data on the server. However, on the Linux client (centos); user authentication is fine, but it fails to mount the user?s home working directory. It seems

Hi Marc, I'm a little confused. The values I provided for client and server max protocol are default values. At least according to the command 'samba-tool testparm -v'. I have not explicitly set them in my smb.conf file. I assume SMB3 became the default at some point with a release? I'm worried now that I must make explicit changes to my smb.conf file when default values are

I am trying to create a sub-domain (in WinServer2003) from a domain which I've created with Samba4. For example, I have the domain: DOMAIN.PDC.CU in Samba 4 and I want to create the sub-domain EST.DOMAIN.PDC.CU in WinServer2003. But::: The Wizard encountered an error while trying to determine if the DNS server with which this domain controller will register supports dynamic updates. What I can

Hello, My DC smb.conf currently has the following set server max protocol = NT1 server min protocol = CORE client max protocol = NT1 client min protocol = CORE Is it safe to change both the client and server max to = SMB3? What about on member servers? Should I be concerned with anything breaking? I'm using Windows 7 clients to authenticate against Ubuntu

Thank you for your reply. This was not a random link I followed. I have reviewed the Samba documentation at https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller, and all the testing that is listed there results in correct and expected answers... I had already noted the /etc/hosts situation, which interestingly does not change the answers I get in testing

Hi, Anyone knows what is this? [root at artemis bin]# ./samba-tool domain provision --use-rfc2307 --interactive Realm [DOM.CITY10.COM.BR]: Domain [DOM]: Server Role (dc, member, standalone) [dc]: DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]: DNS forwarder IP address (write 'none' to disable forwarding) [187.85.85.1]: Administrator password: Retype

Dear all, I try to setup a samba 4 member server on centos 6.5. The wikis and howtos I have found are very confusing. Which is the right way to do this. So winbind can map the domain users and groups. What I have done yet is, Set up Kerberos working and can contact my ADS-kerberos Servers: klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at TPLK.LOC Valid starting

I am trying to grant or denied access to a user for changing his passwd, it's the option: User cannot change passwd. For this, I am trying to use samba-tool dsacl set [option], but I am not sure of its syntax. Could you help me with that? I need to denied this permission without use ADUC or any private tool. My Regards!

Hello guys! How I can create an organizationalUnit (OU)? Now I created an user into an OU already existent, but I need to create a new OU. I tried with: root at s1 :~#nano file.ldif dn: ou=MyOU,DC=dominio,DC=pdc,DC=cu objectClass: top objectClass: organizationalUnit ou: MyOU root at s1 :~#ldbadd --url=/var/lib/samba/private/sam.ldb file.ldif but when I search MyOU on the Active

Hi all, On our DC's we use ntp to keep time synced. I've googled a bit on AD and time sync on workstations, and it seems they are supposed to sync their time with the time on the DC. I see however that in our network, this is not occuring: there is a minute time difference between the dc's and my workstation. Is this something that samba has not yet implemented, or is there

Hi, if you use the UNIX attributes the primary group is ignored if you use winbind and the primary group of the AD attributes is used. So every user has the "Domain Users" group as primary group. I also read that you are not supposed to change the AD primary group to another than "Domain Users". Is there a way to set the UNIX primary group to another group without causing

Hi list, We are working on getting Samba version 4.5.8-debian (on Stretch) with Active Directory running, and we are running into a major road block. Clients (Windows 7 Pro, Windows 10 Pro and Educational) cannot change their passwords on their own. We can force the user to reset the password for their next login (works), or reset the password with ADUC RSAT as the Domain Admin. If the user tries

Hello, Looking to use Windows to encrypt contents redirected to folders on a member server. It looks like I will need to designate the remote server as trusted for delegation. Is this currently supported by Samba 4.3.x? I plan to follow these two documents to achieve this. Thanks. https://technet.microsoft.com/en-us/library/cc757963%28v=ws.10%29.aspx