[Samba] Domain Password Settings

[Mike Ray]

Louis,

This is exactly what I was looking for.

Thanks much for pointing it out to me.

----- On May 6, 2019, at 3:18 AM, samba samba at lists.samba.org wrote:

> Hai Mike,
> 
> See the links below.
> Read the Reference part on the links, thats i think what your looking for.
> 
> As far i know, its the same as shown here.
> https://docs.microsoft.com/en-us/windows/security/threat-protection/security
> -policy-settings/password-policy
> 
> https://docs.microsoft.com/en-us/windows/security/threat-protection/security
> -policy-settings/account-lockout-policy
> 
> 
> Greetz,
> 
> Louis
> 
> 
> 
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mike
>> Ray via samba
>> Verzonden: vrijdag 3 mei 2019 17:42
>> Aan: samba
>> Onderwerp: [Samba] Domain Password Settings
>> 
>> Hello all-
>> 
>> I'm looking to tweak password settings for my domain but have
>> a few question
>> regarding the settings under "samba-tool domain
>> passwordsettings show".
>> 
>> While I found some settings were documented on the wiki
>> (https://wiki.samba.org/index.php/Password_Settings_Objects),
>> I did not find
>> answers to a few questions I had.
>> 
>> 
>> If "maximum password age (days)" is set to "0", it seems that
>> passwords never
>> have to change. If "minimum password age (days)" is set to
>> "0", can passwords be
>> changed multiple times per day, or does it set other behavior?
>> 
>> If "account lockout duration (mins)" is set to "0", is the
>> account not locked
>> out at all or is it locked out until manually unlocked? If
>> the latter, how is
>> that done? Is that done through the "unlock account" action
>> in AD Users and
>> Computers? Does "samba-tool user enable" provide the same
>> functionality?
>> 
>> If "reset account lockout after (mins)" is set to "0", is the
>> counter never
>> reset? If so, can it be manually cleared?
>> 
>> If "reset account lockout after (mins)" is set to a value
>> less than "account
>> lock duration (mins)", after "reset account lockout after
>> (mins)" expires, does
>> the account remain locked until "account lockout duration (mins)"?
>> 
>> If an account is locked out and the "account lockout duration
>> (mins)" starts but
>> then a new authentication failure occurs, is the timer reset?
>> 
>> 
>> 
>> Thanks much to anyone who can provide answers on these questions.
> 
> 
>> 
>> 
>> Mike Ray
>> 
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>> 
>> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba