[Samba] Time synchronization and Password Policies

[Andrew Bartlett]

On Tue, 2017-11-21 at 11:36 +0100, Marco Gaiarin via samba wrote:
> Mandi! lists via samba
>   In chel di` si favelave...
> 
> > No expert, and please someone correct me if I'm wrong, but:
> > I think the samba-tool user passwordsettings are local-DC-specific, so you
> > need to run it on all your DCs.
> > Could it be that you configured only one DC, and your password change
> > happens to be talking with a different DC..?
> 
> AFAIK you are wrong: the policies are on the domain (in the LDAP data,
> the root DN, look at them!).
> 
> AFAIK is the 'privileges' that are host-specific.

This is correct.

Andrew Bartlett

-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba