Forcing Windows Password Change

Andrew Bartlett abartlet at
Sat Sep 22 19:43:02 GMT 2001

Thomas E Bruno wrote:
> I would like to know if there is a way, and how to accomplish this very
> simple task:
> Can samba force clients to change thier passwords from windows. Like the
> NT way "Your password has expired, please type new password" etc...
> If there is not support, why isn't there?  this seems to me to be one
> large feature of a PDC!! Especially when removing a winNT/2000 server
> and placing a linux/samba server in it's place!

I beleive this code is available in Samba 2.2.1a.  Simply ensure that
unix/samba passwords are kept in sync and that 'enable pam restrictions'
is 'yes'.  Then just do normal password expiry on your unix accounts,
and Samba will enforce this during the domain logon process.

Andrew Bartlett

Andrew Bartlett                                 abartlet at
Samba Team member, Build Farm maintainer        abartlet at
Student Network Administrator, Hawker College   abartlet at

More information about the samba mailing list