[Samba] Time synchronization and Password Policies

[Anantha Raghava]

Hello Louis,

Do you mean to say that we have to set both passwordsettings on each of 
samba-ad-dc and as GPO as well for it to properly apply to clients as 
well as server?

-- 

Thanks & Regards,


Anantha Raghava


Do not print this e-mail unless required. Save Paper & trees.

On 21/11/17 4:33 PM, L.P.H. van Belle via samba wrote:
> You guys mix to things.
>
>> AFAIK is the 'privileges' that are host-specific.
> Is correct.
>
>> the policies are on the domain (in the LDAP data,
>> the root DN, look at them!).
> Yes, but only the GPO policies and these are not applied to the samba server.
> And because of that, samba-tools password settings needs to be set on every DC.
>
>
> Greetz,
>
> Louis
>
>
>
>
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
>> Marco Gaiarin via samba
>> Verzonden: dinsdag 21 november 2017 11:36
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] Time synchronization and Password Policies
>>
>> Mandi! lists via samba
>>    In chel di` si favelave...
>>
>>> No expert, and please someone correct me if I'm wrong, but:
>>> I think the samba-tool user passwordsettings are
>> local-DC-specific, so you
>>> need to run it on all your DCs.
>>> Could it be that you configured only one DC, and your
>> password change
>>> happens to be talking with a different DC..?
>> AFAIK you are wrong: the policies are on the domain (in the LDAP data,
>> the root DN, look at them!).
>>
>> AFAIK is the 'privileges' that are host-specific.
>>
>> -- 
>> dott. Marco Gaiarin				        GNUPG
>> Key ID: 240A3D66
>>    Associazione ``La Nostra Famiglia''
>> http://www.lanostrafamiglia.it/
>>    Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al
>> Tagliamento (PN)
>>    marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711
>> f +39-0434-842797
>>
>> 		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
>>        http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
>> 	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>