Hello,
I have run into an issue with the smbk5pwd overlay in slapd 2.4.49 on FreeBSD and I'm hoping someone can point me in the right direction. The majority of the overlay is functioning correctly - when a user updates their password using an exop the sambaLMPassword and sambaNTPassword attributes are updated along with userPassword.

However, the sambaPwdLastSet attribute does not update correctly. After an exop password change the value of sambaPwdLastSet is set to 0. It does not seem to matter whether this attribute is added or updated, it is always set to zero after password change. This is honestly not a huge issue in my environment, but some applications treat a sambaPwdLastSet of zero as an indication that the user must change their password.

Below is my smbk5pwd config:

dn: olcOverlay={5}smbk5pwd
objectClass: olcConfig
objectClass: olcOverlayConfig
objectClass: olcSmbK5PwdConfig
objectClass: top
olcOverlay: {5}smbk5pwd
olcSmbK5PwdEnable: samba
olcSmbK5PwdMustChange: 0

--
Corey Hinshaw

Reply via email to