[Samba] Password policy doesn't work (pdbedit)

[Gareth Cummings]

I had the same problem when I set a password policy using pdbedit and 
tdbsam as the backend... turns out the policy would only apply to new 
accounts and not existing ones.  However if I got the existing users to 
reset their passwords manually the account policy would kick in. 

Radek wrote:
> Hello,
>
>  
>
> I'm using samba 3.0.24 and Debian 4.0. As a password backend I use
> smbpasswd. 
>
> I set password policy: Length - 8 signs, Password history - 3, password
> complexity - script, maximum password age - 30 days
>
>  
>
> The "password length" and complexity works, but "password history" and
> "maximum password age" doesn't.
>
>  
>
> I tried do the same on test machine (samba 3.2.5) and it works fine (users
> and settings I took from my working Samba 3.0.24) . 
>
>  
>
> What can I do about that? What should I check? Any ideas?
>
>  
>
> Pdbedit shows correct settings but the "password must change time" is 19 jan
> 2038 04:14:07 CET
>
>  
>
> Thanks and regards
>
> Radek Bojek
>
>