[Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)

[Jeffrey Chan]

Hi all,

Today one of my users was asked to changed her password @ login again.
I already commented out defaultMaxPasswordAge in
/etc/smbldap-tools/smbldap.conf and ran smbldap-populate

Any other ideas would be appreciated.


Thanks,

- Jeff





On Thu, Oct 20, 2011 at 5:28 PM, Jeffrey Chan <goofrider at gmail.com> wrote:
> Thanks for your response Aaron. I actually checked LDAP too already along
> with pdbedit.
> For the domain record, "sambaMaxPwdAge" is shown to be -1 as it should.
> For each user, "sambaPasswordCanChange" is 0, "sambaPasswordLastSet" is the
> correct password last changed time in epoch. There's no
> "sambaPasswordMustChange" for user records.
>
> - Jeff
>
>
>
> On Fri, Oct 14, 2011 at 8:30 PM, Aaron E. <ssureshot at gmail.com> wrote:
>>
>> Sounds like you've checked mostly all except your ldap backend...
>> Check your LDAP DB for... (they will be in nix timestamp)
>>
>> sambaPasswordCanChange
>> sambaPasswordLastSet
>> sambaPasswordMustChange
>>
>> setup smbldap-tools package
>>
>> On 10/13/2011 11:00 PM, Jeffrey Chan wrote:
>>>
>>> I'm using OpenLDAP as backend.
>>>
>>>
>>> On Wed, Oct 12, 2011 at 11:16 PM, Aaron E.<ssureshot at gmail.com>  wrote:
>>>
>>>> Just cuirous are you using pam or ldap backend?
>>>>
>>>>
>>>> On 10/12/2011 09:22 AM, Marco Ciampa wrote:
>>>>
>>>>> On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote:
>>>>>
>>>>>> Hi all,
>>>>>>
>>>>>> I've posted this a month ago but haven't gotten a reply. Can anyone
>>>>>> please
>>>>>> help?
>>>>>>
>>>>>> - Jeff
>>>>>>
>>>>>>
>>>>>>
>>>>>> On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Chan<goofrider at gmail.com>
>>>>>>  wrote:
>>>>>>
>>>>>>  Hi all,
>>>>>>>
>>>>>>> Since a few months ago Samba ask each of our users to change password
>>>>>>> at
>>>>>>> log on every month and I have not been able to disable it.
>>>>>>>
>>>>>>> I found this page and follow the instructions:
>>>>>>>
>>>>>>>
>>>>>>> http://playingwithsid.**blogspot.com/2010/12/change-**
>>>>>>>
>>>>>>> samba-password-expiry-setting.**html<http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html>
>>>>>>>
>>>>>>> The default ‘Password Must Change’ policy was set to never and
>>>>>>> pdbedit
>>>>>>> shows ‘Password Must Change: never’ for each user, yet the passwords
>>>>>>> still
>>>>>>> get expire once a month.
>>>>>>>
>>>>>>> Can anyone please give me some pointers?
>>>>>>>
>>>>>>> - Jeff
>>>>>>>
>>>>>>
>>>>> Just a hint (maybe wrong...)
>>>>>
>>>>> obey pam restrictions = No
>>>>>
>>>>> ...
>>>>>
>>>>>
>>>>>
>>>> --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:
>>>>  https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba>
>>>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>
>