[Samba] Domain Password Settings
L. van Belle
belle at samba.org
Mon May 6 08:18:28 UTC 2019
Hai Mike,
See the links below.
Read the Reference part on the links, thats i think what your looking for.
As far i know, its the same as shown here.
https://docs.microsoft.com/en-us/windows/security/threat-protection/security
-policy-settings/password-policy
https://docs.microsoft.com/en-us/windows/security/threat-protection/security
-policy-settings/account-lockout-policy
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mike
> Ray via samba
> Verzonden: vrijdag 3 mei 2019 17:42
> Aan: samba
> Onderwerp: [Samba] Domain Password Settings
>
> Hello all-
>
> I'm looking to tweak password settings for my domain but have
> a few question
> regarding the settings under "samba-tool domain
> passwordsettings show".
>
> While I found some settings were documented on the wiki
> (https://wiki.samba.org/index.php/Password_Settings_Objects),
> I did not find
> answers to a few questions I had.
>
>
> If "maximum password age (days)" is set to "0", it seems that
> passwords never
> have to change. If "minimum password age (days)" is set to
> "0", can passwords be
> changed multiple times per day, or does it set other behavior?
>
> If "account lockout duration (mins)" is set to "0", is the
> account not locked
> out at all or is it locked out until manually unlocked? If
> the latter, how is
> that done? Is that done through the "unlock account" action
> in AD Users and
> Computers? Does "samba-tool user enable" provide the same
> functionality?
>
> If "reset account lockout after (mins)" is set to "0", is the
> counter never
> reset? If so, can it be manually cleared?
>
> If "reset account lockout after (mins)" is set to a value
> less than "account
> lock duration (mins)", after "reset account lockout after
> (mins)" expires, does
> the account remain locked until "account lockout duration (mins)"?
>
> If an account is locked out and the "account lockout duration
> (mins)" starts but
> then a new authentication failure occurs, is the timer reset?
>
>
>
> Thanks much to anyone who can provide answers on these questions.
>
>
> Mike Ray
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
More information about the samba
mailing list