[Samba] Account and password expiration

[James]

On 8/11/2015 9:17 AM, John Lewis wrote:
> On 08/11/2015 09:16 AM, John Lewis wrote:
>> How do you check what the current account and password expiration and
>> how do you change it?
> I am  using samba4 ad-dc.
>

    Is it possible to set user specific password policies in Samba4 (e.
    g. on a OU-base)?

Samba can't handle GPO restrictions. You have to use 'samba-tool domain
passwordsettings' to change password policies. But this only applies on
domain level.

Background: The password settings have to be used and validated by the
server. Otherwise a modified Windows client or a Unix client (which
doesn't handle GPOs) could bypass these settings. But Samba can't
evaluate and apply GPO restrictions. It only serves GPOs via the SysVol
share.


-- 
-James