[Samba] Prevent password change from command line

[Marco Gaiarin]

Mandi! Rowland Penny via samba
  In chel di` si favelave...

> > > the UserAccountControl flag "PASSWD_CANT_CHANGE" can not be set via
> > > ldap

> You cannot stop the user from changing their password by setting
> userAccountControl, you need to deny them permission to their object in
> AD.

Ops! Sorry! I've confused 'ADS_UF_DONT_EXPIRE_PASSWD' with
'ADS_UF_PASSWD_CANT_CHANGE', sorry!


Seems is still possible, but is really out of my knowledge...

	https://msdn.microsoft.com/en-us/library/aa746508

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)