[Samba] weak passwords

[mourik jan c heupink]

But the issue is: we have many users that do not login locally using 
windows-workstations, but instead use variour kinds of remote access, 
like web interfaces, email, vpn, etc, etc.

I am not sure what would happen with those services, if I would set 
accounts to 'change password on next logon'...

I know this would work in the case of 'regular' 'interactive logons' as 
I think samba logs call them..

MJ

On 6-10-2015 14:47, Rowland Penny wrote:
> On 06/10/15 13:32, mourik jan c heupink wrote:
>> Hi,
>>
>> Is it possible to test our AD for weak passwords?
>>
>> We have set max password age, and password complexity etc. However, we
>> would like to know that the passwords that are CURRENTLY still in the
>> system are good or weak.
>>
>> Perhaps some kind of tool to test dictionary passwords etc, but
>> preferably locally on the /var/lib/samba databases to not lockout the
>> accounts due to too many failed passwords.
>>
>> Suggestions?
>>
>
> Why test, just make everybody change their password at next login, this
> way they will be complex passwords. :-)
>
> Rowland
>
>