Matthias Spork wrote:

Hello,

#> pdbedit -P "maximum password age" -C 5007600

Does it apply for all users in my domain???


This feature must be activated on yout domain-master. I've set this option also at all other samba domain-controllers (PDC's an BDC's). I don't know, if this is required.

There is the ldap-attribute "shadowMax: 60" for each user, but I don't know if this works yet with samba 3.0.14.

matze


i think i have prompt in
pdbedit -P "maximum password age" -C 86400
it is almost 1 day, just for testing only purpose.
then, when i get to show all the accounts, it shows this to me

Unix username:        yohiu
NT username:          yohiu
Account Flags:        [U          ]
User SID:             S-1-5-21-1584484687-1589642492-3641120062-3006
Primary Group SID:    S-1-5-21-1584484687-1589642492-3641120062-513
Full Name:            Hiu Yen Onn
Home Directory:       \\SY\homes\yohiu
HomeDir Drive:        H:
Logon Script:         mis.bat
Profile Path:         \\SY\profiles\yohiu
Domain:               SHINYANG
Account desc:         Network Engineer
Workstations:
Munged dial:
Logon time:           0
Logoff time:          Sat, 14 Dec 1901 04:45:51 GMT
Kickoff time:         0
Password last set:    Thu, 02 Jun 2005 15:17:38 GMT
Password can change:  Thu, 02 Jun 2005 15:17:38 GMT
Password must change: Sat, 14 Dec 1901 04:45:51 GMT
Last bad password   : 0
Bad password count  : 0

from the above, the password must change flag indicating the password is expired on Sat, 14 Dec 1901 04:45:51 GMT, but, it is not 1 day after the password have been changed. weird.... i am so confusing... thanks for helps...anyway.......


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to