[Samba] SaMBa 4 - password complexity
mat at samba.org
Thu Apr 4 01:01:11 MDT 2013
On 04/03/2013 06:37 PM, Andrew Bartlett wrote:
> On Wed, 2013-04-03 at 13:51 -0300, Celso Viana wrote:
>> Hi all,
>> I have installed the Samba 4, i execute the "domain provision" command, and
>> also have disabled the password complexity and decreases the minimum
>> password length to 3, then I joined a Windows Server 2008 as a DC for the
>> domain samba. After a few minutes the password complexity and minimum
>> values are reset to default. Anyone know why?
> Very interesting!
> My guess is that the Windows DC examined the group policy objects for
> the domain (perhaps some it provided itself) and found that the password
> policy was set.
> Samba doesn't know about group policy as a DC, so can't use that as the
> authoritative source, but it reads the setting in the directory that
> Windows would update.
By default you have 2 GPO created, one that concerns everybody and one
that concerns DCs. I advise you to edit the second one from Windows 2008
and set the complexity as you expect it to be then it should be
replicated on the Samba DC as well soon.
More information about the samba