[Samba] FEDORA 28 + SAMBA 4.8.5 --must-change-at-next-login don't work

[Andreas Schneider]

On Wednesday, 12 September 2018 18:13:16 CEST Andrew Bartlett wrote:
> On Wed, 2018-09-12 at 17:16 +0200, Karel Lang AFD via samba wrote:
> > Hello,
> > if anybody would kindly have anything to advice, please, please - do
> > 
> > :-)
> > 
> > SETUP:
> > Fedora 28 + Samba 4.8.5 AD  (testing environment consisting of 1
> > Samba 
> > server and 1 joined windows machine and 1 account) :-)
> > 
> > PROBLEM:
> > the "--must-change-at-next-login" is the problematic part
> > 
> > after creating user, with this attribute the user is authenticated
> > OK 
> > during FIRST Logon BUT!! when challenged to CHANGE password (as 
> > expected) he/she can not change the pw as the DOMAIN stubbornly, 
> > repeatedly says: password is EXPIRED

Can you please describe the exact steps how this can be reproduced?

You create a new user and then run samba-tool with 
--must-change-at-next-login on that user? Please be as precise as possible.


Thanks!


-- 
Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D