[Samba] Enabling account lockouts

[Dunn, Drew A.]

I'm running Samba 3.0.4 (using a tdb backend) as the PDC for several windows
2000 clients.  I would like to enable an account lockout policy.  I set the
number of bad password attempts using pdbedit by issuing,

# pdbedit -P "bad lockout attempt" -C 3

and recieved confirmation that this was correct.  I then tried to enable
locking by issuing

# pdbedit -u username -c "[L]"

However pdbedit -Lv does not show any change to the account flags.  I have
been able to set other flags like "Password does not expire", "account
disabled", etc.  When setting these I receive confirmation that the flag has
been set but go not receive any confirmation when trying to set the lockout.

Any suggestions?  Is there something else I need to turn on for this to
work?

Drew

> -----Original Message-----
> From: samba-bounces+drew.dunn=jhuapl.edu at lists.samba.org 
> [mailto:samba-bounces+drew.dunn=jhuapl.edu at lists.samba.org] 
> On Behalf Of Dunn, Drew A.
> Sent: Tuesday, July 13, 2004 8:34 AM
> To: 'samba at lists.samba.org'
> Subject: [Samba] Enabling account lockouts
> 
> 
> The release notes indicate support for bad password lockout 
> policy starting with version 3.0.3 but I can't figure out how 
> to enable it.  I didn't see anything in the docs about 
> turning it on.  I also tried looking through all the options 
> by using swat in advanced mode.  How do I enable bad password 
> lockout policy?
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>