[Samba] pwdLastSet=0

Heinz Hölzl heinz.hoelzl at gvcc.net
Thu Nov 21 14:06:48 UTC 2024


Am Donnerstag, dem 21.11.2024 um 13:52 +0000 schrieb Rowland Penny via
samba:
> On Thu, 21 Nov 2024 13:08:41 +0000
> Heinz Hölzl <heinz.hoelzl at gvcc.net> wrote:
> 
> > Am Donnerstag, dem 21.11.2024 um 12:39 +0000 schrieb Rowland Penny
> > via
> > samba:
> > > On Thu, 21 Nov 2024 12:06:33 +0000
> > > Heinz Hölzl via samba <samba at lists.samba.org> wrote:
> > > 
> > > > hi,
> > > > 
> > > > I have accounts which have pwdLastSet=0, even if the password
> > > > was
> > > > set
> > > > a few days or weeks ago.
> > > > 
> > > > Could that be?
> > > > 
> > > > or what exactly does the attribute pwdLastSet mean?
> > > > 
> > > 
> > > If the pwdLastSet attribute is set to '0', it should mean that
> > > the
> > > user
> > > must change their password at next logon, unless
> > > 'UF_DONT_EXPIRE_PASSWD' is set in 'userAccountControl'
> > > 
> > > How are you changing the passwords ?


According to my search, the passwords were made directly from the
client after the password had expired.



> > > 
> > our passwords expire every 90 days
> > 
> > 
> > if the password has expired the pwdLastSet is also 0 ?
> > 
> > 
> 
> pwdLastSet can contain 0 or a number like '133297347992923650', the
> latter is the number of 100-nanosecond intervals since January 1,
> 1601, 12:00 AM and can only be set by the system, it is the date when
> the password was last set. From this the system can calculate when
> the
> password expires (or indeed if it has expired).
> 
> A sysadmin can set a users pwdLastSet attribute to '0' (it is what
> 'User Must Change Password at Next Logon' does), this will cause the
> user to have to change their password at next logon.
> 
> I repeat, how do you set or change the passwords ?
> 
> Rowland
> 
> PS, Please do not 'CC' me, just reply to the list.

sorry

> 
> 



More information about the samba mailing list