[Samba] Cannot change expired password

Felipe Augusto van de Wiel felipe at paranacidade.org.br
Thu Feb 1 13:34:27 GMT 2007

Hash: SHA1

On 01/31/2007 02:47 PM, Jason Baker wrote:
> Sorry again to answer my own post, but I at least figured out how to
> change the Password Last Set value using the LDAP Account Manager.
> Basically you need to set a date further back than 7 days. Convert it to
> Unix time stamp and enter it into the users LDAP info. Then your user
> will be allowed to change their expired password. But that still doesn't
> explain why the Password Can Change attribute doesn't sync with Password
> last set in pdbedit.

	I reported bugs #4313 and #4314 with related problems.

	Yesterday I steped in a similar problem, I did solve it
re-exporting policy from tdb to LDAP and removing the fields of
Last Set and Can Change from the user (I was trying to force him
to change his password on first logon).

 1. https://bugzilla.samba.org/show_bug.cgi?id=4313
 2. https://bugzilla.samba.org/show_bug.cgi?id=4314

	When I create the user account and change his password
to something generic for his/her first login it works, than I
set must change to 0 to force him/her to change it on first
login, but then, the minimum password age will apply and the
user can't change it. :-(

> *Jason Baker
> */IT Coordinator/

	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


More information about the samba mailing list