WG: [Samba] Samba LDAP entries for Password Change

[Daniel Müller]

Hello,

This must be set in LDAP:

sambaPwdCanChange=1 ;or you will never be asked to change your password
sambaPwdLastSet=0
sambaPwdMustChange=0; on my Suse this must be set too try it out for
your machine
And how you' ve been told the sambaMaxPwdAge must be set.

Greetings
Daniel

-----Ursprüngliche Nachricht-----
Von: samba-bounces+mueller=tropenklinik.de at lists.samba.org
[mailto:samba-bounces+mueller=tropenklinik.de at lists.samba.org] Im
Auftrag von Jorge Concha C.
Gesendet: Dienstag, 16. September 2008 23:36
An: Albrecht Dreß; samba at lists.samba.org
Betreff: Re: [Samba] Samba LDAP entries for Password Change


Hi...
sorry for my bad english.

> - when a new account is created, the user immediately must change the

> password when [s]he first logs in;
> - after that, the password shall expire after x days.

sambaMaxPwdAge =  number of seconds  (60 x 60 x 24 x nDays)
sambaPwdLastSet = set to '0'  at create the account.

good luck

Jorge C.

On Tue, 16 Sep 2008 10:27:53 -0400, Albrecht Dreß  
<albrecht.dress at lios-tech.com> wrote:

> Hi all,
>
> I have a question regarding the enforced change of passwords in Samba

> 3.0.28 (coming with Ubuntu Hardy) in connection with a LDAP backend.
In  
> particular, I am looking for a documentation how the fields  
> sambaMinPwdAge, sambaMaxPwdAge (from sambaDomain), sambaPwdCanChange
and  
> sambaPwdMustChange (from sambaSAMAccount) interact.
>
> I would like to have the following:
> - when a new account is created, the user immediately must change the

> password when [s]he first logs in;
> - after that, the password shall expire after x days.
>
> Unfortunately, I tried a number of combinations without success.   
> Everything seems to be controlled by the sambaMaxPwdAge setting
(seconds  
> relative to sambaPwdLastSet when the password must be changed?), and
the  
> other entries seem to be irrelevant?
>
> Any documentation/pointer would be welcome!
>
> Thanks, Albrecht.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba



-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba