[Samba] Samba Password Expiry Date

Hiu Yen Onn yohiu at shinyang.com.my
Fri Jun 3 01:08:58 GMT 2005

Matthias Spork wrote:

> Hello,
>>> #> pdbedit -P "maximum password age" -C 5007600
>> Does it apply for all users in my domain???
> This feature must be activated on yout domain-master. I've set this 
> option also at all other samba domain-controllers (PDC's an BDC's). I 
> don't know, if this is required.
> There is the ldap-attribute "shadowMax: 60" for each user, but I don't 
> know if this works yet with samba 3.0.14.
> matze
i think i have prompt in
pdbedit -P "maximum password age" -C 86400
it is almost 1 day, just for testing only purpose.
then, when i get to show all the accounts, it shows this to me

Unix username:        yohiu
NT username:          yohiu
Account Flags:        [U          ]
User SID:             S-1-5-21-1584484687-1589642492-3641120062-3006
Primary Group SID:    S-1-5-21-1584484687-1589642492-3641120062-513
Full Name:            Hiu Yen Onn
Home Directory:       \\SY\homes\yohiu
HomeDir Drive:        H:
Logon Script:         mis.bat
Profile Path:         \\SY\profiles\yohiu
Domain:               SHINYANG
Account desc:         Network Engineer
Munged dial:
Logon time:           0
Logoff time:          Sat, 14 Dec 1901 04:45:51 GMT
Kickoff time:         0
Password last set:    Thu, 02 Jun 2005 15:17:38 GMT
Password can change:  Thu, 02 Jun 2005 15:17:38 GMT
Password must change: Sat, 14 Dec 1901 04:45:51 GMT
Last bad password   : 0
Bad password count  : 0

from the above, the password must change flag indicating the password is 
expired on Sat, 14 Dec 1901 04:45:51 GMT, but, it is not 1 day after the 
password have been changed. weird.... i am so confusing... thanks for 

More information about the samba mailing list