[Samba] Sarbanes-Oxley headaches

[Stuart Highlander]

----- Original Message ----- 
From: "John H Terpstra" <jht at Samba.Org>
To: <samba at lists.samba.org>
Sent: Monday, May 16, 2005 9:17 AM
Subject: Re: [Samba] Sarbanes-Oxley headaches


> On Monday 16 May 2005 07:50, Stuart Highlander wrote:
> > > I gather that OP would be better served by using a tdb or ldap
backend.
> >
> > i am not the original poster, but did ask the question regarding account
> > lockout and reset using the smbpasswd backend.
> >
> > i agree that moving to ldap or tdb would better suit my needs but i do
not
> > have the test environment nor the time to move and adequately test my
> > production environment to one or the other right now.
> >
> > since i am using the smbpasswd for the foreseeable future, are the
account
> > lockout and reset features applicable to using the smbpasswd backend?
if
> > not, it is ok.  my guess is that they are not, but cannot find
> > documentation to verify this.
> >
> > as for sox, i found a free program that enables window$ boxes to log
event
> > logs to a remote syslog server, found here:
> >
> >  http://www.netadmintools.com/art284.html
>
> The advanced Windows account facilities are available only with the tdbsam
or
> ldapsam backends. It is very easy to migrate to tdbsam. Here are the
steps:
>
> 1. Edit smb.conf to include this line:
> passdb backend = tdbsam
> 2. Migrate your smbpasswd file to tdbsam:
> pdbedit -i smbpasswd -e tdbsam
>
> Done.
>

thank you for the information on converting to tdbsam.

where in the docs would it discuss changing passwords?

stu