[Samba] LDAP and password expiry

[John H Terpstra]

On Thursday 25 August 2005 13:44, Jacob Elder wrote:
> I should have noted that this started coming up only after we switched
> to LDAP.
> The local policies on the workstations are mostly unchanged from the old
> domain, which did not suffer from this problem. By "mostly," I mean we are
> now allowing all authenticated users to change the system time (so
> logon.cmd can use NET TIME /SET /Y). This shouldn't have impacted the
> password expiry...

Email your smb.conf to me off-line to <jht at samba.org>, I'll try to help.

- John T.

>
>
> --
> Jacob Elder
>
> Quoting Craig White <craigwhite at azapple.com>:
> > On Thu, 2005-08-25 at 14:53 -0400, jake at capecodhomefinder.com wrote:
> >> Hello,
> >>
> >> We are using Samba 3.0.14a-6, slapd 2.2.26-4 and smbldap-tools 0.9.1-2
> >> on Debian. My users are complaining about warnings that their password
> >> is about to
> >> expire and that the are told "You do not have permission to change your
> >> password" when they try to change it. sambaAcctFlags includes the X
> >> flag which
> >> I thought meant "don't expire passwords." The password changing
> >> thing has got
> >> me even more stumped. Can anyone offer any clues?
> >
> > ----
> > I believe that you will find the warning about the change password is
> > generated by local policy on the computers and not demanded by Samba.
> >
> > I think Paul was hinting at a rather quirky thing in Samba 3 that gets
> > an error reported to the user when he changes his password that it
> > didn't work but on properly configured systems, that message seems to
> > get sent anyway, even when the password change does indeed work.
> >
> > Craig
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, 2 Ed., ISBN: 0131882228
Samba-3 by Example, 2 Ed., ISBN: 0131882221X
Hardening Linux, ISBN: 0072254971
Other books in production.