[Samba] Some questions about Samba user accounts.

[Rowland penny]

On 06/05/2021 17:40, Jason Long via samba wrote:
> Hello,
> I used "useradd" and "smbpasswd" for create a Samba user account and I have some questions:


Is this is on a Samba domain member ?

If so, then stop, you are doing it wrong, you need to use samba-tool, 
see 'samba user add --help' for more info

>   
>
> 1- What is a machine account and is it mandatory?


A domain joined computer has an account created for it during the join, 
basically a 'machine account' is a 'user account' with an extra objectclass.

>
> 2- How can I change the password policies like length and complexity criteria when setting up a Samba user password?
>
> # smbpasswd -a user
> New SMB password:
> Retype new SMB password:
> Failed to modify account record CN=user,CN=Users,DC=mydomain,DC=z to set user attributes: 0000052D: Constraint violation - check_password_restrictions: the password is too short. It should be equal or longer than 7 characters!
> Failed to modify entry for user user.


Still doing it wrong, you don't use smbpasswd, see 'samba-tool -help' 
for more info.

>
> 3- Is it possible to create a group and add users to it?


Yes, 'samba-tool group add' and samba-tool group addmembers', again, add 
'--help' to the commands for more info.

Rowland


>
>
>
> Thank you.
>