[Samba] Password expiration

[Larry McElderry]

We had similar problems after migrating from NT4.  The problem was in some of the sambaAcctFlags.  Most of our users have permanent
passwords and the sambaAcctFlags = UX.  Did a little research, but couldn't find anything that defined all the possible values.

-----Original Message-----
From: samba-bounces+larry=ptcoupling.com at lists.samba.org
[mailto:samba-bounces+larry=ptcoupling.com at lists.samba.org]On Behalf Of
Jacob Elder
Sent: Tuesday, September 06, 2005 9:57 AM
To: samba at lists.samba.org
Subject: [Samba] Password expiration


Hello,

I still can't figure out why my users' passwords are expiring. Ever since we
switched to LDAP, passwords expire every 14 days. Here is an example LDAP user
entry:

version: 1

# LDIF Export for: uid=sgoodrich,ou=Users,dc=trec,dc=us
# Generated by phpLDAPadmin ( http://phpldapadmin.sourceforge.net/ ) on
September 6, 2005 10:56 am
# Server: TREC (localhost)
# Search Scope: base
# Search Filter: (objectClass=*)
# Total Entries: 1

# Entry 1: uid=sgoodrich,ou=Users,dc=trec,dc=us
dn: uid=sgoodrich,ou=Users,dc=trec,dc=us
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
objectClass: inetLocalMailRecipient
cn: Suzanne Goodrich
sn: Goodrich
uid: sgoodrich
uidNumber: 2046
gidNumber: 100
homeDirectory: /home/sgoodrich
gecos: Suzanne Goodrich
description: Suzanne Goodrich
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
displayName: Suzanne Goodrich
sambaSID: S-1-5-21-193596418-479643985-2333711390-5092
mailRoutingAddress: sgoodrich at eastham.trec.us
sambaPrimaryGroupSID: S-1-5-21-193596418-479643985-2333711390-513
mailLocalAddress: sgoodrich
mail: sgoodrich at capecodhomefinder.com
mail: suzanne at anchor-realestate.net
mailHost: eastham.trec.us
sambaLMPassword: secret
sambaNTPassword: secret
sambaPwdLastSet: 1117397780
sambaPwdMustChange: 1125951380
userPassword: {SSHA}secret
sambaAcctFlags: [NUX]
loginShell: /bin/false

We're just about ready to put up a bounty on this one. Any ideas?

--
Jacob Elder



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba