[Samba] Attempts to Set Max Password Age in Samba Tool Fails

Tim Beale timbeale at catalyst.net.nz
Sun Mar 31 20:34:16 UTC 2019


Hi,

I've raised a bug for this:
https://bugzilla.samba.org/show_bug.cgi?id=13873

The problem is the command just doesn't work under Python 3.

In the meantime, a work-around is to specify the --min-pwd-age on the
command as well. E.g.

samba-tool domain passwordsettings set --max-pwd-age=270
--min-pwd-age=default
WARNING: The "server schannel" option is deprecated
Minimum password age changed!
Maximum password age changed!
All changes applied successfully

Cheers,
Tim

On 31/03/19 8:17 AM, Matthew Delfino via samba wrote:
> Hey Rowland,
>
>
> Thanks for getting back to me. I just finished my recompile. I even ran a "samba-tool dbcheck --fix". I still I get this error:
>
>
>
> samba-tool domain passwordsettings set --max-pwd-age=270
> ERROR(<class 'TypeError'>): uncaught exception - unorderable types: NoneType() >= int()
>   File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 184, in _run
>     return self.run(*args, **kwargs)
>   File "/usr/lib/python3/dist-packages/samba/netcmd/domain.py", line 1513, in run
>     if max_pwd_age and max_pwd_age > 0 and min_pwd_age >= max_pwd_age:
>
>
>  From:   Rowland Penny via samba <samba at lists.samba.org> 
>  To:   "samba at lists.samba.org" <samba at lists.samba.org> 
>  Sent:   3/30/2019 11:27 AM 
>  Subject:   Re: [Samba] Attempts to Set Max Password Age in Samba Tool Fails 
>
> On Sat, 30 Mar 2019 11:07:35 -0500 
> Matthew Delfino <mdelfino.list.samba at knockinc.com> wrote: 
>  
>   
>>  
>> What was your configure line ? 
>>  
>>  
>> Assuming too much info is better than not enough, and hoping the 
>> context might help, here's my *upgrade* process: 
>>  
>>  
>> # cd /usr/local/src 
>>  
>> # wget 
>> https://download.samba.org/pub/samba/stable/samba-4.10.0.tar.gz (or 
>> whatever new version is posted) # tar -zxf samba-4.10.0.tar.gz # rm 
>> samba-4.10.0.tar.gz # ./configure --enable-fhs --prefix=/usr 
>> --sysconfdir=/etc --localstatedir=/var --mandir=/usr/share/man/ 
>> --enable-debug # make # sudo service samba-ad-dc stop 
>> # sudo make install 
>> # sudo shutdown -r now 
>>  
>>  
>> This process has never failed me... Perhaps... until now? 
>  
> I have installed Ubuntu 18.04 (yes I know you are using 16.04) and I am 
> trying to build 4.10.0, but I have just hit a problem, cmocka isn't 
> new enough.
>
>
> Hmmm... What's the earliest version you know works?
>
>
>
>> When upgrading to 4.10.0, verbiage about moving to Python 3 in the 
>> READ ME lead me to take the extra step of installing the packages 
>> outlined on the samba wiki page entitled, 
>> "Package_Dependencies_Required_to_Build_Samba," section, "Debian / 
>> Ubuntu." Apropos to the comment you left below, note that this page 
>> does not recommend the "python3-crypto" package. 
>  
> The problem is, 4.10.0 is the first version that requires python3, so 
> the full list of required packages isn't really known, I guessed at 
> python3-crypto because python2-crypto is required for the python2 
> build. On Ubuntu 18.04, python3-crypto is installed by default. 
>  
>>  
>>  
>> That's not me telling you that you're wrong because wiki page - I'm 
>> not that kind of dude. I'm just calling out that, if you're right, 
>> someone with Samba wiki editing powers would be a really cool if 
>> s/he'd add it to the list. ;-) 
>  
> Once I know just what the dependencies are i.e. after I build Samba 
> 4.10.0, I will ;-) 
>> Okay. I just got that "python3-crypto" package on my DCs. I'm going 
>> to start the long process of recompiling and reinstalling now to see 
>> if that helps. I'm going to send this email before doing so in case 
>> you're inclined to reply on the weekend with any insights from this 
>> message. 
>>  
>>  
>> I hope you're having a nice weekend. 
>>  
>  
> I am :-) 
>  
> Rowland
>
>
>
> Matthew
>
> © 2019 KNOCK, inc. All rights reserved. KNOCK is a registered trademark of KNOCK, inc. This message and any attachments contain information, which is confidential and/or privileged. If you are not the intended recipient, please refrain from any disclosure, copying, distribution or use of this information. Please be aware that such actions are prohibited. If you have received this transmission in error, kindly notify the sender by e-mail. Your cooperation is appreciated.



More information about the samba mailing list