How to do password expiration

Andrew Bartlett abartlet at pcug.org.au
Sun Jan 27 03:27:02 GMT 2002


Marco Rebsamen wrote:
> 
> Am Sonntag, 27. Januar 2002 00.33 schrieben Sie:
> > Either use PAM (in Samba 2.2) or Samba 3.0 alpha's 'native' support for
> > this.
> >
> > On 2.2 it only works for domain logons, and PAM support required
> > compilation --with-pam, setting 'obey pam restrictions = yes' and
> > setting up /etc/pam.d/samba.
> >
> > Andrew Bartlett
> 
> If i made it with pam, how do i configure the expiration ??

You configure PAM for expiry as per your system's normal setup, then
when samba does its account checking it will obey any 'account expired'
flag that is set.

The setting in /etc/pam.d/samba are what matter.

This only works for NT domain logons - Win9X is not affected by this.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net




More information about the samba mailing list