How to do password expiration
Andrew Bartlett
abartlet at pcug.org.au
Sun Jan 27 03:27:02 GMT 2002
Marco Rebsamen wrote:
>
> Am Sonntag, 27. Januar 2002 00.33 schrieben Sie:
> > Either use PAM (in Samba 2.2) or Samba 3.0 alpha's 'native' support for
> > this.
> >
> > On 2.2 it only works for domain logons, and PAM support required
> > compilation --with-pam, setting 'obey pam restrictions = yes' and
> > setting up /etc/pam.d/samba.
> >
> > Andrew Bartlett
>
> If i made it with pam, how do i configure the expiration ??
You configure PAM for expiry as per your system's normal setup, then
when samba does its account checking it will obey any 'account expired'
flag that is set.
The setting in /etc/pam.d/samba are what matter.
This only works for NT domain logons - Win9X is not affected by this.
Andrew Bartlett
--
Andrew Bartlett abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team abartlet at samba.org
Student Network Administrator, Hawker College abartlet at hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
More information about the samba
mailing list