[Samba] my protected AD, part 2

[Stefan G. Weichinger]

Am 12.11.18 um 13:03 schrieb Stefan G. Weichinger via samba:

> if I let the "samba password" expire in a way, will this enforce the
> user to choose a new password within his Windows session? Does this work
> for standalone servers?
> 
> I think of "smbpasswd -P" here ... maybe newer tools are recommended here.

ok then, talking to myself here ;-)

wrote my ansible playbook, works so far. The expiry question is still
open ...

And does someone have a pointer how to let the password cracker "john
the ripper" attack the samba passwords?

I assume they are stored in /var/lib/samba/private/passdb.tdb, correct?