Hi MJ,

just in case, the prompt can be disabled in server profile -> General
settings -> Server settings -> Advanced options.

LAM displays the prompt if:

Reading the user's own DN results in a non-32 return code (no such object)
AND
( No data was returned for the read request
  OR
  The user attribute "pwdreset" is set to TRUE
  OR
  The user attribute "passwordexpirationtime" is set and is in the past
)

Can you check in tree view if one of the attributes is set? The
condition to return no data happens when a password change is enforced
via PPolicy.


Best regards

Roland


Am 01.10.20 um 15:31 schrieb mj:
> Hi Roland,
> 
> We just installed LAM Pro 7.3, and noticed that after logon, LAM tells
> us our password has expired and asks us to set a new one. We can cancel
> the dialogue however, and proceed to work normally in lam.
> 
> Reverting back to 7.2, we get no such notification.
> 
> Looking at the user, we don't understand why would ask us to change the
> password:
> 
>> root@lam:~# pdbedit -u username -v
>> Unix username:        username
>> NT username:
>> Account Flags:        [U          ]
>> User SID:             S-1-5-xxxx
>> Primary Group SID:    S-1-5-yyyy
>> Full Name:            username
>> Home Directory:
>> HomeDir Drive:        (null)
>> Logon Script:
>> Profile Path:
>> Domain:
>> Account desc:
>> Workstations:
>> Munged dial:
>> Logon time:           Thu, 01 Oct 2020 10:30:01 CEST
>> Logoff time:          0
>> Kickoff time:         Thu, 14 Sep 30828 04:48:05 CEST
>> Password last set:    Thu, 12 Mar 2020 21:00:04 CET
>> Password can change:  Thu, 12 Mar 2020 21:00:04 CET
>> Password must change: never
>> Last bad password   : 0
>> Bad password count  : 0
>> Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
> 
> For the record, samba-tool domain passwordsettings show:
>> Password complexity: on
>> Store plaintext passwords: off
>> Password history length: 24
>> Minimum password length: 14
>> Minimum password age (days): 0
>> Maximum password age (days): 0
>> Account lockout duration (mins): 30
>> Account lockout threshold (attempts): 20
>> Reset account lockout after (mins): 60
> 
> Why would lam 7.3 ask us to change the password?
> 
> Best,
> MJ
> 
> 
> _______________________________________________
> Lam-public mailing list
> Lam-public@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/lam-public


_______________________________________________
Lam-public mailing list
Lam-public@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to