[Samba] Samba 4 Password Policies
Viktor Trojanovic
viktor at troja.ch
Tue Feb 12 11:20:38 UTC 2019
Thanks for the link, Carlos. Clearly I have to correct what I wrote, it
does seem supported since Samba 4.8.
Vladimir, add 'apply group policies = yes' to your KDC's smb.conf and
try again.
Viktor
On 12.02.2019 12:14, Carlos via samba wrote:
> Hi!
>
> I think is ok(used gpo for password policy) , because i read this it,
> but....
>
> https://wiki.samba.org/index.php/Samba_4.8_Features_added/changed#KDC_GPO_application
>
>
>
> Regards;
>
>
>
> On 11/02/2019 19:21, Viktor Trojanovic via samba wrote:
>> The pw policy GPO is applied to the domain controller itself. That
>> only works if the DC is a windows machine, though. So, no, no
>> workaround for this, use samba-tool.
>>
>> Viktor
>>
>> On February 11, 2019 21:36:56 Vladimir via samba
>> <samba at lists.samba.org> wrote:
>>
>>> Hi Folks,
>>>
>>> I am relative new to samba 4, not so new to Samba, but I have a problem
>>> with password policies.
>>>
>>> So I set a password policy (Maximum password age) in RSAT for the
>>> Default
>>> Domain Policy, but this policy was not applied to my domain, even
>>> after the
>>> command gpupdate /all and after rebooting the samba server. (I am using
>>> samba version 4.9.0)
>>>
>>> So I discovered in the samba server that the command:
>>> 'samba-tool domain passwordsettings show'
>>> was showing 45 day for the Maximum password age, and that was the value
>>> active for my domain.
>>>
>>> My questions are:
>>>
>>> Can I use the GPO to set the password policies, or should I always use
>>> samba-tools??
>>>
>>> Can I disable this behavior and let the GPO that I have set take the
>>> control to these policies??
>>>
>>> Thanks in advance,
>>> Vladimir.
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions: https://lists.samba.org/mailman/options/samba
>>
>>
>>
>>
>
More information about the samba
mailing list