[Samba] Password policy for user-managed passwords

[Philippe LeCavalier]

On Sun, Jul 18, 2021, 10:21 Rowland Penny via samba <samba at lists.samba.org>
wrote:

> On Sun, 2021-07-18 at 09:56 -0400, Philippe LeCavalier wrote:
> >
> > >
> > > You can force a user to change their password by resetting it with:
> > >
> > > samba-tool user setpassword User1 --newpassword=passw0rd --must-
> > > change-
> > > at-next-login
> > > This implies I have to set a password that I would provide to them
> > > before they can set a new one if I'm reading that correctly? How
> > > would I apply that domain wide?
>
> I would only do this for individual users or new users.[snip].
>
> > > I'm still uncertain how I transition smoothly. If I set the
> > > password to expire after 1 day will they be prompted to change it
> > > or will their account be disabled per the wording for that option?
>
> The 'prompting' is down to the display manager, it should prompt the
> user to change their password, it should prompt well before the
> password expires, so I wouldn't use 1 day.


Is there a setting to control the amount of time prior to expiration a user
> will get notified.

Phil

>