[Samba] pwdLastSet=0

[Rowland Penny]

On Thu, 21 Nov 2024 18:13:11 +0000
Heinz Hölzl via samba <samba at lists.samba.org> wrote:

> Am Donnerstag, dem 21.11.2024 um 14:11 +0000 schrieb Rowland Penny via
> samba:
> > On Thu, 21 Nov 2024 14:06:48 +0000
> > Heinz Hölzl via samba <samba at lists.samba.org> wrote:
> > 
> > > Am Donnerstag, dem 21.11.2024 um 13:52 +0000 schrieb Rowland Penny
> > > via
> > > samba:
> > > > On Thu, 21 Nov 2024 13:08:41 +0000
> > > > Heinz Hölzl <heinz.hoelzl at gvcc.net> wrote:
> > > > 
> > > > > Am Donnerstag, dem 21.11.2024 um 12:39 +0000 schrieb Rowland
> > > > > Penny
> > > > > via
> > > > > samba:
> > > > > > On Thu, 21 Nov 2024 12:06:33 +0000
> > > > > > Heinz Hölzl via samba <samba at lists.samba.org> wrote:
> > > > > > 
> > > > > > > hi,
> > > > > > > 
> > > > > > > I have accounts which have pwdLastSet=0, even if the
> > > > > > > password
> > > > > > > was
> > > > > > > set
> > > > > > > a few days or weeks ago.
> > > > > > > 
> > > > > > > Could that be?
> > > > > > > 
> > > > > > > or what exactly does the attribute pwdLastSet mean?
> > > > > > > 
> > > > > > 
> > > > > > If the pwdLastSet attribute is set to '0', it should mean
> > > > > > that
> > > > > > the
> > > > > > user
> > > > > > must change their password at next logon, unless
> > > > > > 'UF_DONT_EXPIRE_PASSWD' is set in 'userAccountControl'
> > > > > > 
> > > > > > How are you changing the passwords ?
> > > 
> > > 
> > > According to my search, the passwords were made directly from the
> > > client after the password had expired.
> > 
> > What clients and how do they change their passwords ?
> 
> 
> using the windows logon screen
> 

Then that should trigger the code to change the users password, part
of which includes setting the pwdLastSet attribute, so why isn't it
happening for you ?

Can you tell us your basic setup ?
What OS is running on the DCs ?
What version of Samba ?
What are the clients, versions etc ?

Rowland