LDAP - Samba password policies

[Gavin Henry]

<quote who="Roland Gruber">
> Hi all,
>
> a user of LAM noticed that Samba now supports policies in the
> sambaDomain object. Are these policies already active in the last Samba
> releases (since what release)?

I can't see changes here:

http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_3_0_RELEASE/examples/LDAP/samba.schema?rev=15135&view=log

> I need more information on these settings:
>
> sambaMinPwdLength : Minimal password length (default: 5)
>
> No limit is 0 or -1?
>
>
> sambaLogonToChgPwd : Force Users to logon for password change (default:
> 0 => off, 2 => on)
>
> What if I set this to 1?
>
>
> sambaLockoutObservationWindow : Reset time after lockout in minutes
> (default: 30)
>
> Difference to sambaLockoutDuration?
>
>
> sambaLockoutThreshold : Lockout users after bad logon attempts (default:
> 0 => off)
>
> On is 1?
>
>
> sambaRefuseMachinePwdChange : Allow Machine Password changes (default: 0
> => off)
>
> On is 1?
>
>
> Thanks in advance for your help.
>
>
>
> Greetings
>
> Roland
>
>
> --
>
> LDAP Account Manager
> http://lam.sourceforge.net
>