[Samba] Samba 4 account with a 'ldbmodify-ed' password does not login into domain from a Windows 7 VM

Rowland Penny rpenny at samba.org
Sat Apr 8 17:28:43 UTC 2017

On Sat, 08 Apr 2017 16:53:09 +0000
Leonardo Bruno Lopes <leonardo at cefetmg.br> wrote:

>   Thank you so much, Rowland.
> I disabled the complexity using the command you sugested (just added
> 'set', I mean, 'samba-tool domain passwordsettings set
> --complexity=off').
> 'smbclient' still works, no surprise here. However I can't test the
> Windows login right now. For some weird reason I can't open Windows
> VMs throught VPN. As soon as I have some aditional information I will
> let you and the list know.
> About the complexity setting itself, I suppose It turns off the Samba
> password complexity verification while re/setting passwords.

No, it just stops Samba requiring complex passwords at any point.
>It would
> not be a problem as the software I (will) use to maintain the
> accounts already has some complexity rules. I fact, the passwords I
> have in my LDAP (in the 'sambaNTPassword' attribute) are complex
> enough to be used by Samba AD.

If they are, then this is not your problem, but testing from a windows
client will prove this, one way or the other.


More information about the samba mailing list