[Samba] Changing expired Samba AD password during Windows login

[Marco Gaiarin]

Mandi! Ken McDonald via samba
  In chel di` si favelave...

> I'm running a Samba AD 4.7.4 and cannot set a new password for a user with
> an expired password during login from a Windows PC. Changing a password from
> inside a login with cntl-alt-del "change password" works ok.
[...]
> samba-tool domain passwordsettings show

Have you set the GPOs?

'samba-tool domain passwordsettings' works, as a ''global policy'', for
samba domain controller only.
For clients (and windows domain members, in general) you have to set
the same policy in GPO.


Last announcment of 4.8 beta seems this have been 'fixed', eg also
samba domain controllers now obey to GPOs policy.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)