[Samba] User and Password expiry

[Marcel de Reuver]

"pwdLastSet" and the "Maximum password age (days)" will enforce a password
change on a Windows client.
With free Windows tool "AD Explorer" you can explore the Active Directory
and see pwdLastSet human readable for your accounts.

BR, Marcel

2015-01-12 10:15 GMT+01:00 Neil <nwilson123 at gmail.com>:

>
> [..]
> [root at headoffice ~]# samba-tool domain passwordsettings show
> Password informations for domain 'DC=abc-ho,DC=local'
> Password complexity: on
> Store plaintext passwords: off
> Password history length: 12
> Minimum password length: 8
> Minimum password age (days): 1
> Maximum password age (days): 60
>
> If I search for an account on the command line, the following attributes
> show...
>
> ldapsearch -x -H "ldap://160.128.20.8:389" -b "dc=abc-ho,dc=local" -D
> [..]
> pwdLastSet: 130646513050000000
> [..]
>