[Samba] Samba LDAP entries for Password Change

[Jorge Concha C.]

Hi...
sorry for my bad english.

> - when a new account is created, the user immediately must change the  
> password when [s]he first logs in;
> - after that, the password shall expire after x days.

sambaMaxPwdAge =  number of seconds  (60 x 60 x 24 x nDays)
sambaPwdLastSet = set to '0'  at create the account.

good luck

Jorge C.

On Tue, 16 Sep 2008 10:27:53 -0400, Albrecht Dreß  
<albrecht.dress at lios-tech.com> wrote:

> Hi all,
>
> I have a question regarding the enforced change of passwords in Samba  
> 3.0.28 (coming with Ubuntu Hardy) in connection with a LDAP backend.  In  
> particular, I am looking for a documentation how the fields  
> sambaMinPwdAge, sambaMaxPwdAge (from sambaDomain), sambaPwdCanChange and  
> sambaPwdMustChange (from sambaSAMAccount) interact.
>
> I would like to have the following:
> - when a new account is created, the user immediately must change the  
> password when [s]he first logs in;
> - after that, the password shall expire after x days.
>
> Unfortunately, I tried a number of combinations without success.   
> Everything seems to be controlled by the sambaMaxPwdAge setting (seconds  
> relative to sambaPwdLastSet when the password must be changed?), and the  
> other entries seem to be irrelevant?
>
> Any documentation/pointer would be welcome!
>
> Thanks, Albrecht.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba



-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/