[Samba] Account and password expiration

James lingpanda101 at gmail.com
Tue Aug 11 13:25:03 UTC 2015

On 8/11/2015 9:17 AM, John Lewis wrote:
> On 08/11/2015 09:16 AM, John Lewis wrote:
>> How do you check what the current account and password expiration and
>> how do you change it?
> I am  using samba4 ad-dc.

    Is it possible to set user specific password policies in Samba4 (e.
    g. on a OU-base)?

Samba can't handle GPO restrictions. You have to use 'samba-tool domain
passwordsettings' to change password policies. But this only applies on
domain level.

Background: The password settings have to be used and validated by the
server. Otherwise a modified Windows client or a Unix client (which
doesn't handle GPOs) could bypass these settings. But Samba can't
evaluate and apply GPO restrictions. It only serves GPOs via the SysVol


More information about the samba mailing list