[Samba] "ldap passwd sync" and shadow attributes

[Eric A. Hall]

On 11/1/2005 7:58 PM, Andrew Bartlett wrote:
> On Mon, 2005-10-31 at 22:55 -0500, Eric A. Hall wrote:

>>I just rechecked and am seeing the same thing you are: shadowLastChange
>>does not get updated.
> 
> The idea (which never really got picked up properly) was that the ldap
> server should do this.  It could then update any type of password it
> chose, and set all the right 'changed times' etc.
> 
> So we really need to work with vendors to have good modules in their
> ldap servers.

Are you asking the LDAP server to change the password, or are you changing
it yourself? It sounds like the former, and if that's the case then the
server should definitely be updating the shadow stuff.

-- 
Eric A. Hall                                        http://www.ehsco.com/
Internet Core Protocols          http://www.oreilly.com/catalog/coreprot/