similar to: Account and password expiration

Mandi! Rowland Penny via samba In chel di` si favelave... > The password settings are related to the DC and by default you cannot > set or change a password if it isn't complex enough Ok. >, you do not need to use an external script. Ahem, someone out there need it. ;-) This mean that, if i keep a 'check password script', i could also hit some trubles on, eg,

On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: > Hi folks, > > I just wonder why it is not possible to set domain password policies > with GPO, using the Windows RSAT Group Policy Manager? For most > other > settings, using GPOs through RSAT works. > > For somebody who sets up a Samba AD DC infrequently, this is a huge > trap. There should be a

Hello, When PDC was installed I remember that everybody could change thair passwords after first 24h after password reset via admin console. (I remamber that I was searching for this and even if GPO was min 0 days for changing password you had to wait) Anyway... Now noone is able to change password. When GPO tells you to change password after 30days, or you want to change it; typing old

I'm running a Samba AD 4.7.4 and cannot set a new password for a user with an expired password during login from a Windows PC. Changing a password from inside a login with cntl-alt-del "change password" works ok. I've already decreased the minimum password age to 0 samba-tool domain passwordsettings show Password complexity: on Store plaintext passwords: off Password history

On 30.08.2023 11:58, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 09:49:05 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 29.08.2023 21:38, Andrew Bartlett via samba wrote: >>> On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: >>>> On 27.08.2023 23:45, Andrew Bartlett wrote: >>>>>

On Wed, 30 Aug 2023 12:40:08 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 30.08.2023 11:58, Rowland Penny via samba wrote: > > On Wed, 30 Aug 2023 09:49:05 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > >>>

On 30.08.2023 16:21, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 12:40:08 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 30.08.2023 11:58, Rowland Penny via samba wrote: >>> On Wed, 30 Aug 2023 09:49:05 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> On

On Wed, 30 Aug 2023 18:56:48 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 30.08.2023 16:21, Rowland Penny via samba wrote: > > On Wed, 30 Aug 2023 12:40:08 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 30.08.2023 11:58, Rowland Penny via samba wrote: > >>> On

Thank you! That was the hint I needed with 4.2 and ""Bad Password Lockout in the AD DC". I did it via samba-tool this time and not via GPO with RSAT. samba-tool domain passwordsettings set --history-length=0 samba-tool domain passwordsettings show Password informations for domain 'DC=x,DC=x,DC=x' Password complexity: on Store plaintext passwords: off Password history

First off, I apologize if this is a duplicate - I had some issues with the first email I tried to join this list with! I'm currently using samba4 as an AD DC (domain and forest are both configured with the samba-tool command to be at the 2008_R2 functional level) for both Windows and Linux systems. I've got the default password settings set using the "samba-tool domain

On 27.08.2023 23:45, Andrew Bartlett wrote: > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >> Hi folks, >> >> I just wonder why it is not possible to set domain password policies >> with GPO, using the Windows RSAT Group Policy Manager? For most >> other >> settings, using GPOs through RSAT works. >> >> For somebody who sets

On 30.08.2023 19:17, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 18:56:48 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 30.08.2023 16:21, Rowland Penny via samba wrote: >>> On Wed, 30 Aug 2023 12:40:08 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> On

Hi, here on the wiki https://wiki.samba.org/index.php/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F I read this: "Is it possible to set user specific password policies in Samba4 (e. g. on a OU-base)? Samba can't handle GPO restrictions. You have to use 'samba-tool domain passwordsettings' to change password policies.

On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: > On 27.08.2023 23:45, Andrew Bartlett wrote: > > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: > > > Hi folks, > > > I just wonder why it is not possible to set domain password > > > policieswith GPO, using the Windows RSAT Group Policy Manager? > > > For

On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: >> On 27.08.2023 23:45, Andrew Bartlett wrote: >>> On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >>>> Hi folks, >>>> I just wonder why it is not possible to set domain password >>>> policieswith GPO,

On Wed, 30 Aug 2023 09:49:05 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > > On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: > >> On 27.08.2023 23:45, Andrew Bartlett wrote: > >>> On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >

Thanks for the help, however I don't think your suggestion applies in my case. On a fresh install of Samba 4.7.4 AD you cannot change a user password on a logged in PC through cntl-alt-del -> ChangePassword because the default MinAge is 1 days. I had to use the "samba-tool domain passwordsettings set --min-pwd-age=0" command to make the logged-on style of password change

Hello, I'd like to know if the following issues happen to you too. 1. Sysvol permissions After I edited a GPO with a user which is member of domain Admins, sysvolcheck runs on an error due to security settings of thisvedited GPO. Running sysvolreset makes it all for he again 2. GPO password policy We have a policy that defines a password change interval of 32 days. On our clients (windows

On Mon, 23 Oct 2017 16:52:05 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > Sorry, i came back on this, but: > > > In another, more generic, way: how password policies are enforced? > > still i need an answer on this question. > > > I've done some tests, using my account, that pdbedit say: > > root at vdcsv1:~# LANG=C

On 11/21/2017 4:34 AM, lists via samba wrote: > Hi, > > On 21-11-2017 4:40, Anantha Raghava via samba wrote: >> >> /*Password Policies*/ >> >> Password policies are not getting enforced on the clients. Initially >> we thought that we have to set those policies using "samba-tool user >> passwordsettings" and not on Windows GPO. As this was