[Samba] Cannot change expired password

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/31/2007 02:47 PM, Jason Baker wrote:
> Sorry again to answer my own post, but I at least figured out how to
> change the Password Last Set value using the LDAP Account Manager.
> Basically you need to set a date further back than 7 days. Convert it to
> Unix time stamp and enter it into the users LDAP info. Then your user
> will be allowed to change their expired password. But that still doesn't
> explain why the Password Can Change attribute doesn't sync with Password
> last set in pdbedit.

	I reported bugs #4313 and #4314 with related problems.

	Yesterday I steped in a similar problem, I did solve it
re-exporting policy from tdb to LDAP and removing the fields of
Last Set and Can Change from the user (I was trying to force him
to change his password on first logon).

 1. https://bugzilla.samba.org/show_bug.cgi?id=4313
 2. https://bugzilla.samba.org/show_bug.cgi?id=4314



	When I create the user account and change his password
to something generic for his/her first login it works, than I
set must change to 0 to force him/her to change it on first
login, but then, the minimum password age will apply and the
user can't change it. :-(


> *Jason Baker
> */IT Coordinator/

	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFwexjCj65ZxU4gPQRAizdAJ4tgEI/hNIcSGhUq5Iqa5APlF23CQCguepn
aUXVQlaDW+erDjr2pio9mWk=
=D3br
-----END PGP SIGNATURE-----