samba-tool user setexpiry is broken in 4.7

[Andrew Bartlett]

On Wed, 2017-08-02 at 07:31 +0100, Rowland Penny via samba-technical
wrote:
> 
> I don't think you can do this for an individual user. As far as I am
> aware, it is an interaction between the users pwdLastSet attribute and
> the domain maxPwdAge attribute.
> 

Rowland, this is correct.

The long-term fix is PSO support.  

https://technet.microsoft.com/en-us/library/cc754461(v=ws.10).aspx

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba