[Samba] another question about account locking

[Bruce Richardson]

On Fri, Jan 14, 2011 at 02:51:58AM +0900, TAKAHASHI Motonobu wrote:
> 2011/1/13 Kevin Taylor <groucho.64738 at hotmail.com>:
> >
> > Is there a way that we can increment the samba bad password count, when a user fails a password on a linux system? I'm looking for ways to get both Windows and Linux to simultaneously lock out accounts if they fail so many times. We're using an LDAP backend.
> 
> How about "obey pam restrictions = yes" ?
> 
> "obey pam restrictions = yes" means Samba should obey PAM's restriction.

This has other benefits, because it allows you to use the session
components of various pam modules (e.g. pam_mkhomedir).

-- 
Bruce

What would Edward Woodward do?