similar to: Changing expired Samba AD password during Windows login

Hi, thanks for your help. Your suggestion makes sense, however I think there should be some way for users to be able to change an expired password from login dialogue.  Actually I had a problem doing this previously with NT4 style Samba domain and never looked into a resolution.  Now that I've found Samba does AD style domain, I'm excited to use it in several customer locations.  Since I

On win8.1 & srv2012r2 it is "The password for this account has expired" On 01/17/2018 10:44 PM, Luke Barone wrote: > (Remember to reply all) > > What error message, *specifically*, comes up when the user with the > expired password attempts to change it? > > On Jan 17, 2018 7:36 PM, "Ken McDonald" <ken at generation.tech> wrote: > > To

On 1/18/2018 9:22 AM, Ken McDonald via samba wrote: > > Hi, thanks for your help. Your suggestion makes sense, however I think there should be some way for users to be able to change an expired password from login dialogue. > Actually I had a problem doing this previously with NT4 style Samba domain and never looked into a resolution. > Now that I've found Samba does AD style

(Remember to reply all) What error message, *specifically*, comes up when the user with the expired password attempts to change it? On Jan 17, 2018 7:36 PM, "Ken McDonald" <ken at generation.tech> wrote: > To test, I use a desktop OS (win8.1) with rsat installed to create a new > user with ADUC and set the "user must change password at next logon" OR for > an

Thanks for the help, however I don't think your suggestion applies in my case. On a fresh install of Samba 4.7.4 AD you cannot change a user password on a logged in PC through cntl-alt-del -> ChangePassword because the default MinAge is 1 days. I had to use the "samba-tool domain passwordsettings set --min-pwd-age=0" command to make the logged-on style of password change

Ok, so I tried all the suggestions without success. Unless I hear back from someone saying it is NOT possible for a user to change an expired password during login from a Domain account on a Samba 4.7.4 AD domain (only 1 DC, and I also tried latest dev release), then I will proceed with more in-depth troubleshooting, log file debugging, and mock-up VM's in order to determine what is

I went back and re-installed on a clean VM of Ubuntu Server 16.04.3 and built Samba 4.7.4 with default configuration and it works just fine to change expired passwords at login. I should have tested this default configuration a while back. I was trying to use MIT Kerberos instead of Hemidal and had followed all the directions on this link:

Hello! Own Samba 4.4 as ADDC with this cnfiguração passwords: root @ Upsilon: ~ # samba-domain tool PasswordSettings show Password informations for domain 'DC = XXXXXXXX " Password complexity: on Store plaintext passwords: off Password history length: 24 Minimum password length: 7 Minimum password age (days): 1 Maximum password age (days): 400 Account lockout duration (mins): 30

Hello guys! I need a help from you! I need on my list Samba4, all users who are with the password expired. This because where I work there is a great turnover and the personnel department does not return me the users who are not part of the staff. Thank you all! -- View this message in context: http://samba.2283325.n4.nabble.com/Users-list-and-the-date-the-password-will-expire-tp4690644.html

On another clean install (with all updates) of Ubuntu Server 16.04.3, trying your line of dependencies fails: Package libgpgme-dev is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source E: Package 'libgpgme-dev' has no installation candidate E: Unable to locate package

Hi! I have one question about passwordsettings in Samba 4: My configuration: S.O. : Ubuntu 16.04 Samba Version:  4.7.7 -- samba-tool domain passwordsettings show Password complexity: on Store plaintext passwords: off Password history length: 24 Minimum password length: 7 Minimum password age (days): 0 Maximum password age (days): 180 Account lockout duration (mins): 30 Account lockout

This happens to me as well. Over several different versions of Samba. It's a minor nuisance on my end. Basically the following * User is prompted to change password * User types old password along with new password twice. * User is prompted with the error message 'unable to change password. doesn't meet the complexity blah blah blah'. * It will then prompt for old

debian 9 fresh install, samba-4.10.2 from Louis: root at lnxdc1:/home/service# samba-tool domain passwordsettings show Password informations for domain 'DC=mydomain,DC=lan' Password complexity: on Store plaintext passwords: off Password history length: 10 Minimum password length: 8 Minimum password age (days): 0 Maximum password age (days): 60 Account lockout duration (mins): 30 Account

As Rowland points out, that password already meets the complexity criteria, so I don't think Password Settings Objects (PSOs) will help here. PSOs allow you to tailor different passwordsettings for different users, i.e. turn complexity on or off for specific users. PSOs don't let you customize the criteria that determines whether a password is complex or not. So you could use PSOs to

Hi, is there a way to force password complexity on NT4 style domains? the "samba-tool domain passwordsettings" seems to only work on DC mode, right? Boris

First off, I apologize if this is a duplicate - I had some issues with the first email I tried to join this list with! I'm currently using samba4 as an AD DC (domain and forest are both configured with the samba-tool command to be at the 2008_R2 functional level) for both Windows and Linux systems. I've got the default password settings set using the "samba-tool domain

Hello! I am on Samba 4.10.0, Ubuntu 16.04.2 LTS. I recently reset a password and found that my password expiration had somehow gotten set to 400 days. I went to one of my DCs and ran the following command: # samba-tool domain passwordsettings show Password informations for domain 'DC=samdom,DC=mydomain,DC=com' Password complexity: on Store plaintext passwords: off Password history

Hi, here on the wiki https://wiki.samba.org/index.php/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F I read this: "Is it possible to set user specific password policies in Samba4 (e. g. on a OU-base)? Samba can't handle GPO restrictions. You have to use 'samba-tool domain passwordsettings' to change password policies.

James, I configured the account lockout policies by RSAT, GPEDIT.MSC. By GPEDIT.MSC I set the value = 10 attempts. Through the samba-tool, I used this command: # samba-tool domain passwordsettings set --account-lockout-threshold=11 INFO: Current debug levels: ... pm_process() returned Yes Module 'tombstone_reanimate' is disabled. Skip registration.lpcfg_servicenumber:

Hi All, I have setup samba 4.3.9-Ubuntu AD DC, I want to setup password policy and account lockout policy to all my domain users. How I can do that. Please somebody give me the steps. -- Vivek Patil Assistant Manager - IT Forgeahead Solutions vivek.patil at forgeahead.io *O* +91 (0) 20 66 44 5900 | *M *+91 9579 216 049 601 Zero One, Level 6, Mundhwa, Pune 411036, Maharashtra, India *W*