similar to: Changing expired Samba AD password during Windows login

I can only share my experience: domain with only samba DC's (started from samba 4.4 updated to 4.7 in the meantime), windows clients (vista, 7, 8.1 and 10) no problem whatsoever, passwords are changed every X days, and users have no problem with the procedure (prompt "your password has expired" -> user enters new password -> "you password was changed" -> OK)

(Remember to reply all) What error message, *specifically*, comes up when the user with the expired password attempts to change it? On Jan 17, 2018 7:36 PM, "Ken McDonald" <ken at generation.tech> wrote: > To test, I use a desktop OS (win8.1) with rsat installed to create a new > user with ADUC and set the "user must change password at next logon" OR for > an

Mandi! Ken McDonald via samba In chel di` si favelave... > I'm running a Samba AD 4.7.4 and cannot set a new password for a user with > an expired password during login from a Windows PC. Changing a password from > inside a login with cntl-alt-del "change password" works ok. [...] > samba-tool domain passwordsettings show Have you set the GPOs? 'samba-tool domain

Mandi! Ken McDonald via samba In chel di` si favelave... > Thanks for the help, however I don't think your suggestion applies in my > case. On a fresh install of Samba 4.7.4 AD you cannot change a user password > on a logged in PC through cntl-alt-del -> ChangePassword because the default > MinAge is 1 days. I had to use the "samba-tool domain passwordsettings set >

On Wed, 31 Jan 2018 19:01:42 -0500 Ken McDonald via samba <samba at lists.samba.org> wrote: > On another clean install (with all updates) of Ubuntu Server 16.04.3, > trying your line of dependencies fails: > > Package libgpgme-dev is not available, but is referred to by another > package. > This may mean that the package is missing, has been obsoleted, or > is only

Thanks for the help, however I don't think your suggestion applies in my case. On a fresh install of Samba 4.7.4 AD you cannot change a user password on a logged in PC through cntl-alt-del -> ChangePassword because the default MinAge is 1 days. I had to use the "samba-tool domain passwordsettings set --min-pwd-age=0" command to make the logged-on style of password change

Waiting Ubuntu 18.04. No extra compiling for MIT Kerberos need. There are all dependencies you need: # apt-get install acl attr autoconf bind9utils bison build-essential debhelper dnsutils docbook-xml docbook-xsl flex gdb libjansson-dev krb5-user libacl1-dev libaio-dev libarchive-dev libattr1-dev libblkid-dev libbsd-dev libcap-dev libcups2-dev libgnutls28-dev libgpgme-dev libjson-perl

Ok, so I tried all the suggestions without success. Unless I hear back from someone saying it is NOT possible for a user to change an expired password during login from a Domain account on a Samba 4.7.4 AD domain (only 1 DC, and I also tried latest dev release), then I will proceed with more in-depth troubleshooting, log file debugging, and mock-up VM's in order to determine what is

On 1/18/2018 9:22 AM, Ken McDonald via samba wrote: > > Hi, thanks for your help. Your suggestion makes sense, however I think there should be some way for users to be able to change an expired password from login dialogue. > Actually I had a problem doing this previously with NT4 style Samba domain and never looked into a resolution. > Now that I've found Samba does AD style

On win8.1 & srv2012r2 it is "The password for this account has expired" On 01/17/2018 10:44 PM, Luke Barone wrote: > (Remember to reply all) > > What error message, *specifically*, comes up when the user with the > expired password attempts to change it? > > On Jan 17, 2018 7:36 PM, "Ken McDonald" <ken at generation.tech> wrote: > > To

I went back and re-installed on a clean VM of Ubuntu Server 16.04.3 and built Samba 4.7.4 with default configuration and it works just fine to change expired passwords at login. I should have tested this default configuration a while back. I was trying to use MIT Kerberos instead of Hemidal and had followed all the directions on this link:

I'm running a Samba AD 4.7.4 and cannot set a new password for a user with an expired password during login from a Windows PC. Changing a password from inside a login with cntl-alt-del "change password" works ok. I've already decreased the minimum password age to 0 samba-tool domain passwordsettings show Password complexity: on Store plaintext passwords: off Password history

On another clean install (with all updates) of Ubuntu Server 16.04.3, trying your line of dependencies fails: Package libgpgme-dev is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source E: Package 'libgpgme-dev' has no installation candidate E: Unable to locate package

Hi, thanks for your help. Your suggestion makes sense, however I think there should be some way for users to be able to change an expired password from login dialogue.  Actually I had a problem doing this previously with NT4 style Samba domain and never looked into a resolution.  Now that I've found Samba does AD style domain, I'm excited to use it in several customer locations.  Since I

I'm in the process of setting up a Samba 4 PDC on Debian 8. I've set user passwords to expire after a day for testing purposes. When a user tries to log in when his password has already expired, he only gets a short "The user account has expired." message and then gets sent back to the username/password screen, effectively locking them out. Tested with Windows 10 and Windows 7.

The reason I ask about the patches is because I think the problem you're seeing might actually be a bug in pam_unix.so.1 - it's something to try at least. We don't use password aging and we don't use the "passwd" command to change passwords, so we haven't run into this at our site even though we probably don't have pam_unix.so patched up. Also, the passwd

I'm using a Linux workstation in an NT domain environment. I ran into a problem today where my NT password had expired and I could no longer use any services (e.g., Outlook). I found the domain controller host and attempted to use smbpasswd -r <host> to change the password, however it simply returned NT_STATUS_PASSWORD_EXPIRED (duh!). After trying for a couple hours to change the

Hi , I am using OpenSSH7.5 on AIX platform and I was testing the same against the user's password expired functionality. Normally when password is expired and if I do telnet , it will prompt for password change and at the same time user will allowed to logged in successfully. But when I try the same with ssh, it prompts me for password change and after changing the password, the connection

I installed a new Linux server for remote user access using Ubuntu 14.04 and x2goserver, authenticating against our existing Samba 4.2.2 AD server. All was working beautifully for a couple of days, with myself and one other user. Then the other user's AD password expired, after which when they attempted to log in winbindd spiralled out of control. Ended up with several 100% CPU winbindd

Now it becomes really interesting: I just tested what happens when I set "the user must change the password on the next login". Then, on my Samba domain controller, I used kinit <the user name> and entered the current password. Surprisinlgy, I got the message from Kerberos "Password for the user is expired. You must change it now." And I can change the password!