AW: [Samba] Expiry of passwords with PDC and LDAP

[Andrew Bartlett]

On Fri, 2004-03-12 at 22:46, Adam Williams wrote:
> > > > where can I change the password-age?
> > > pdbedit -P "maximum password age" -C xxxx
> > That's running!
> > 1.
> > Is this solution documented?
> 
> Yes, it is in the Samba HOWTO Collection PDF, and -
> ftp://ftp.kalamazooliux.org/pub/pdf/Samba3-WhatsNew.sxi.pdf
> 
> > Theres nothing to find in "man pdbedit" or "pdbedit --help"
> 
> Yes, there is; under account policy.
> 
> > Why can I change this Value in LDAP (LAM)? Which values in LAM dont't work
> > too?
> 
> You can change the last changed attributes.
> 
> > 2.
> > Where can I get the functionality, that users can use a passwords only one
> > time?
> 
> Set "password history".  These are stored in TDBs on the the PDC, and
> not in your SAM

This will be stored in the SAM (and therefore into LDAP or tdbsam as
appropriate), when they are implemented.  The changes are yet to be
integrated.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040312/759a9a8b/attachment.bin