[Samba] Domain Password Settings

L. van Belle belle at samba.org
Mon May 6 08:18:28 UTC 2019


Hai Mike, 

See the links below. 
Read the Reference part on the links, thats i think what your looking for. 

As far i know, its the same as shown here. 
https://docs.microsoft.com/en-us/windows/security/threat-protection/security
-policy-settings/password-policy

https://docs.microsoft.com/en-us/windows/security/threat-protection/security
-policy-settings/account-lockout-policy


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mike 
> Ray via samba
> Verzonden: vrijdag 3 mei 2019 17:42
> Aan: samba
> Onderwerp: [Samba] Domain Password Settings
> 
> Hello all-
> 
> I'm looking to tweak password settings for my domain but have 
> a few question
> regarding the settings under "samba-tool domain 
> passwordsettings show".
> 
> While I found some settings were documented on the wiki
> (https://wiki.samba.org/index.php/Password_Settings_Objects), 
> I did not find
> answers to a few questions I had.
> 
> 
> If "maximum password age (days)" is set to "0", it seems that 
> passwords never
> have to change. If "minimum password age (days)" is set to 
> "0", can passwords be
> changed multiple times per day, or does it set other behavior?
> 
> If "account lockout duration (mins)" is set to "0", is the 
> account not locked
> out at all or is it locked out until manually unlocked? If 
> the latter, how is
> that done? Is that done through the "unlock account" action 
> in AD Users and
> Computers? Does "samba-tool user enable" provide the same 
> functionality?
> 
> If "reset account lockout after (mins)" is set to "0", is the 
> counter never
> reset? If so, can it be manually cleared?
> 
> If "reset account lockout after (mins)" is set to a value 
> less than "account
> lock duration (mins)", after "reset account lockout after 
> (mins)" expires, does
> the account remain locked until "account lockout duration (mins)"?
> 
> If an account is locked out and the "account lockout duration 
> (mins)" starts but
> then a new authentication failure occurs, is the timer reset?
> 
> 
> 
> Thanks much to anyone who can provide answers on these questions.


> 
> 
> Mike Ray
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
> 




More information about the samba mailing list