[Samba] Cannot change passwords on Active Directory Samba from clients

[Andrew Bartlett]

On Sat, 2017-06-03 at 09:10 +0200, Marc Muehlfeld via samba wrote:
> Hi Luke,
> 
> Am 03.06.2017 um 01:01 schrieb Luke Barone via samba:
> > We have disabled all the password policies in Group Policy Management
> > Console, as well as using samba-tool domain passwordsettings to disable any
> > restrictions, such as minimum password age, and password complexity.
> 
> This is a local setting on each DC. Have you set it on all of your Samba 
> DCs?

To be clear, this one isn't.  Password policies are stored in the
directory.

> For Windows DCs this setting is managed using GPOs and each DC applies 
> this setting. However, Samba is currently not able to process GPOs. For 
> this reason this feature was implemented in samba-tool, but needs to be 
> set on each DC.

BTW, patches to help fix this have been published, and I'm working with
their author on a review for a new set.  In short, watch this space, we
may be able to address this issue for 4.7 or 4.8!

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba