"Password must change" versus sambaPwdMustChange attribute

Bartlomiej Solarz-Niesluchowski Bartlomiej.Solarz-Niesluchowski at wit.edu.pl
Thu May 24 08:28:05 GMT 2007

Good morning!

I have problems with "Password must change" from pdbedit versus 
sambaPwdMustChange attribute from LDAP.

On my site i use samba based on LDAP backend.

I set password policy via pdbedit -P "maximum password age" -C -1 and 
set the individual password policy via pdbedit -r username 

on samba 3.0.24 this allow me to setup individual time of Maximum password age

on samba 3.0.25 pdbedit -r username --pwd-must-change-time=XXXXYYYY 
do nothing.....

it seems that on 3.0.24 field sambaPwdMustChange has precedense 
over  "maximum password age"

on 3.0.25 it looks different:
- "maximum password age" has bigger precedence then sambaPwdMustChange

can someone show me a light in tunnel?

Best Regards

Bartlomiej Solarz-Niesluchowski, Administrator WSISiZ
e-mail: Bartlomiej.Solarz-Niesluchowski at wit.edu.pl
JID: solarz at jabber.wit.edu.pl
01-447 Warszawa, ul. Newelska 6, pokoj 404, pon.-pt. 8-16, tel. 228369253
Motto - Jak sobie poscielisz tak sie wyspisz

More information about the samba-technical mailing list