[Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)

[Jeffrey Chan]

Thanks for your response Aaron. I actually checked LDAP too already along
with pdbedit.

For the domain record, "sambaMaxPwdAge" is shown to be -1 as it should.

For each user, "sambaPasswordCanChange" is 0, "sambaPasswordLastSet" is the
correct password last changed time in epoch. There's no
"sambaPasswordMustChange" for user records.


- Jeff




On Fri, Oct 14, 2011 at 8:30 PM, Aaron E. <ssureshot at gmail.com> wrote:

> Sounds like you've checked mostly all except your ldap backend...
> Check your LDAP DB for... (they will be in nix timestamp)
>
> sambaPasswordCanChange
> sambaPasswordLastSet
> sambaPasswordMustChange
>
> setup smbldap-tools package
>
>
> On 10/13/2011 11:00 PM, Jeffrey Chan wrote:
>
>> I'm using OpenLDAP as backend.
>>
>>
>> On Wed, Oct 12, 2011 at 11:16 PM, Aaron E.<ssureshot at gmail.com>  wrote:
>>
>>  Just cuirous are you using pam or ldap backend?
>>>
>>>
>>> On 10/12/2011 09:22 AM, Marco Ciampa wrote:
>>>
>>>  On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote:
>>>>
>>>>  Hi all,
>>>>>
>>>>> I've posted this a month ago but haven't gotten a reply. Can anyone
>>>>> please
>>>>> help?
>>>>>
>>>>> - Jeff
>>>>>
>>>>>
>>>>>
>>>>> On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Chan<goofrider at gmail.com>
>>>>>  wrote:
>>>>>
>>>>>  Hi all,
>>>>>
>>>>>>
>>>>>> Since a few months ago Samba ask each of our users to change password
>>>>>> at
>>>>>> log on every month and I have not been able to disable it.
>>>>>>
>>>>>> I found this page and follow the instructions:
>>>>>>
>>>>>>
>>>>>> http://playingwithsid.**blogsp**ot.com/2010/12/change-**<http://blogspot.com/2010/12/change-**>
>>>>>> samba-password-expiry-setting.****html<http://playingwithsid.**
>>>>>> blogspot.com/2010/12/change-**samba-password-expiry-setting.**html<http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html>
>>>>>> >
>>>>>>
>>>>>>
>>>>>> The default ‘Password Must Change’ policy was set to never and pdbedit
>>>>>> shows ‘Password Must Change: never’ for each user, yet the passwords
>>>>>> still
>>>>>> get expire once a month.
>>>>>>
>>>>>> Can anyone please give me some pointers?
>>>>>>
>>>>>> - Jeff
>>>>>>
>>>>>>
>>>>>  Just a hint (maybe wrong...)
>>>>
>>>> obey pam restrictions = No
>>>>
>>>> ...
>>>>
>>>>
>>>>
>>>>  --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/****mailman/options/samba<https://lists.samba.org/**mailman/options/samba>
>>> <https://**lists.samba.org/mailman/**options/samba<https://lists.samba.org/mailman/options/samba>
>>> >
>>>
>>>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba>
>