[Samba] Samba4 Users can not change their password using ctrl + alt + del

[vikas]

Hi team !!

samba=4.1.5 AD DC
os=centos 6.3 64bit

Client= Windows 7 ultimate 32bit

User cannot change password using clrl + alt + del after login when they 
try to change they get *this <http://tinyurl.com/o683lr3>* unable to 
update the password....*

samba-tool domain passwordsettings show

Password complexity: on
Store plaintext passwords: off
Password history length: 24
Minimum password length: 5
Minimum password age (days): 30
Maximum password age (days): 42

smb.conf
# Global parameters
[global]
         workgroup = IK
         realm = IK.LOCAL
         netbios name = DC
         server role = active directory domain controller
         dns forwarder = 192.168.1.1
         idmap_ldb:use rfc2307 = yes
         log file = /var/log/samba/log.%u
         log level = 3
         printing = bsd
         printcap name = /dev/null
         syslog = 0
#       include = /usr/local/samba/etc/smb.conf.client-%I
........truncated................
*
also i have waited 24hrs as mention in previous thread

there are no log activity when user is trying to change password

user can change password when we use "use can change the password at 
next logon " using any kind of password like lee at 321  lee at 123 which 
doesn't throw any complexity error...


regards
vikas