Re: [Samba] Problems adding domain policies in samba4.0.4

2013-05-07 Thread Andrew Bartlett
On Tue, 2013-05-07 at 09:35 +0900, TAKAHASHI Motonobu wrote:
 From: ruben.cervantes ruben.cervan...@cmg.jovenclub.cu
 Date: Mon, 06 May 2013 16:05:31 +
 
 (snip)
  I activated the account lockout policy, and I adjusted to three all
  
  after having done this restart the client and nothing that policy does not
  work, there are others that do work, a colleague recommended me chekear
  reset the ACL with samba-tool command ntacl sysvolreset but nothing does
  not work. I need help from a specialist in Samba4 for version if I resolve
  the problem with this policy, beforehand thank you very much.
 
 You have to set account policy via samba-tool domain passwordsettings.
 
 Samba4 can provide GPO but cannot be a client.

Additionally, there simply isn't the code to do account lockout.
Someone was thinking to do that for GSoC this year, but I probably
didn't encourage them enough, I'm not sure if they persisted. 

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problems adding domain policies in samba4.0.4

2013-05-07 Thread ruben.cervantes
Hi first of all thank you very much to all who have tried to help me, 
but unfortunately I could fix it, looking a bit on the subject I found 
this information in the following path:


\\server2\sysvol\jc.local.cu\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft\Windows 
NT\SecEdit


Here there is a file named GptTmpl.inf


and content is this

[Unicode]
Unicode=yes
[Version]
signature=$CHICAGO$
Revision=1
[System Access]
MinimumPasswordAge = 30
MaximumPasswordAge = 42
MinimumPasswordLength = 7
PasswordComplexity = 1
LockoutBadCount = 3
ResetLockoutCount = 3
LockoutDuration = 3
[Registry Values]
MACHINE\Software\Microsoft\Windows 
NT\CurrentVersion\Winlogon\ForceUnlockLogon=4,1
MACHINE\Software\Microsoft\Windows 
NT\CurrentVersion\Winlogon\PasswordExpiryWarning=4,25
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLockedUserId=4,2 

MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption=1,Mensaje 
de Prueba
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText=7,!!!Mensaje 
de prueba!

MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName=4,1


well so it I can view the keys to are being established good and the 
information is in the customer record the question is Why not this 
directive works, maybe it has nothing to do with the problem but it 
causes curiosity, I advised to update to version 4.0.5, thanks in advance.

--
Nombre: Lic. Ruben Cervantes Rodríguez
Cargo: Administrador de Red
Municipio: Vertientes
Provincia: Camagüey Cuba
Teléfono: 30-7469

--
Este mensaje ha sido analizado por MailScanner
en busca de virus y otros contenidos peligrosos,
y se considera que está limpio.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problems adding domain policies in samba4.0.4

2013-05-06 Thread ruben.cervantes
Greetings colleagues I write again because I still have the same problem 
with the account lockout policy, thanks for the great help from friends 
who have tried to help me. Primarily I want to tell everything I did to 
try to solve the problem persists.


Samba4.04 installed from scratch on a real machine.

Join a client with Windows XP SP3 virtualized.

Client installed on the tool adminpack 2003

My domain is jc.local.cu.

I activated the account lockout policy, and I adjusted to three all

after having done this restart the client and nothing that policy does 
not work, there are others that do work, a colleague recommended me 
chekear reset the ACL with samba-tool command ntacl sysvolreset but 
nothing does not work. I need help from a specialist in Samba4 for 
version if I resolve the problem with this policy, beforehand thank you 
very much.



--
Este mensaje ha sido analizado por MailScanner
en busca de virus y otros contenidos peligrosos,
y se considera que está limpio.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problems adding domain policies in samba4.0.4

2013-05-06 Thread TAKAHASHI Motonobu
From: ruben.cervantes ruben.cervan...@cmg.jovenclub.cu
Date: Mon, 06 May 2013 16:05:31 +

(snip)
 I activated the account lockout policy, and I adjusted to three all
 
 after having done this restart the client and nothing that policy does not
 work, there are others that do work, a colleague recommended me chekear
 reset the ACL with samba-tool command ntacl sysvolreset but nothing does
 not work. I need help from a specialist in Samba4 for version if I resolve
 the problem with this policy, beforehand thank you very much.

You have to set account policy via samba-tool domain passwordsettings.

Samba4 can provide GPO but cannot be a client.

---
TAKAHASHI Motonobu mo...@monyo.com / @damemonyo 
   facebook.com/takahashi.motonobu

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problems adding domain policies in samba4.0.4

2013-05-02 Thread ruben.cervantes
Friends I need help I'm implementing a domain samba4.0.4 and everything 
works fine with some other policies but the add and do not work, I need 
to know why this happens and what I can do to solve it, beforehand thank 
you very much.



--
Este mensaje ha sido analizado por MailScanner
en busca de virus y otros contenidos peligrosos,
y se considera que está limpio.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba