[Samba] Account Lockout policies are not working in samba 4.1.5

[Andrew Bartlett]

On Thu, 2014-03-20 at 12:45 +0100, Marc Rechté wrote:
> Le 20/03/2014 12:24, nayanivijay a écrit :
> > Hello,
> >
> > I have a samba 4.1.5. I have created OUs and linked GPO to OU for account
> > lockout policies.
> >
> > Account Lockout Duration: 15min
> > Account Lockout Threshold: 5 invalid attempts
> > Reset Account lockout counter after: 15min
> >
> > I have created a test account and logged in with an incorrect password more
> > than 5 times to a machine. but the test account never locks and the computer
> > never prompts me that the account has been locked out. All other policies
> > that are set in this GPO are applying, but the Account Lockout policy does
> > not work.
> > i think some hotfix might be available for this issue.
> > Can anyone please help with this issue?
> >
> >
> >
> > --
> > View this message in context: http://samba.2283325.n4.nabble.com/Account-Lockout-policies-are-not-working-in-samba-4-1-5-tp4662860.html
> > Sent from the Samba - General mailing list archive at Nabble.com.
> >
> Hi,
> 
> have a look here: 
> https://wiki.samba.org/index.php/Samba_AD_management_from_windows at the 
> page bottom. Password policies are not read by Samba4.

And enforcement depends on a patch I have pending review.  It should be
in master soon however.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba