[Samba] Where is password expiration notice period

[Victor Siman'kin]

use pam_winbind
     $ man pam_winbind
         ...
         warn_pwd_expire
            Defines number of days before pam_winbind starts to warn 
about passwords that are going to expire. Defaults to 14
            days.
and (or)pam_krb5
     $ man pam_krb5
         ...
         defer_pwchange
         fail_pwchange
         force_pwchange

27.11.2018 19:14, Mark Foley via samba пишет:
> In our password settings we have:
>
>> samba-tool domain passwordsettings show
> :
> Password complexity: on
> Store plaintext passwords: off
> :
> Minimum password age (days): 0
> Maximum password age (days): 90
> :
>
> I don't find any setting for how many days before the expiration to warn users about the
> pending expiration. On Windows, users seem to get notified about a pending password expiration
> at around 5-7 days beforehand. On Macos it's 20 days. I don't recall that Linux/KDE notifies at
> all.
>
> Is this an AD setting or is this strictly up to the individual OS/workstation to set?
>
> THX --Mark
>