Your password expires today problem
in [Samba]
|
Prev: [Samba] failed to execute child process
Next: [Samba] Windows clients forget the name of a Samba network drive (e.g. "Network Drive P:")
From: Michael B. Trausch on 11 Mar 2010 13:10 On 03/11/2010 02:04 AM, Richard Lamboj wrote: > i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is > already a bug report. > > Your workaround doesn't work for me. Is there another solution? > > This don't work: pdbedit -P "maximum password age" -C 4294967294 > > I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files > don't have changed, or? I was told on IRC not to use pdbedit for changing the password aging information in Samba, but to instead use "net sam" to set policy. You should be able to set the maximum password age using the following command: # net sam policy set "maximum password age" 4294967294 You can set the following policy attributes this way (this is output from "net sam policy list"): min password length password history user must logon to change password maximum password age minimum password age lockout duration reset count minutes bad lockout attempt disconnect time refuse machine password change HTH, Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
From: Richard Lamboj on 11 Mar 2010 16:00 Hello, server-p:/# net sam policy set "maximum password age" 4294967294 Account policy "maximum password age" value was: -2 Account policy "maximum password age" value is now: -2 Is that Output Normal? Kind Regards -------- Original-Nachricht -------- > Datum: Thu, 11 Mar 2010 12:58:44 -0500 > Von: "Michael B. Trausch" <mike+gmane(a)trausch.us> > An: samba(a)lists.samba.org > Betreff: Re: [Samba] Your password expires today problem > On 03/11/2010 02:04 AM, Richard Lamboj wrote: > > i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is > > already a bug report. > > > > Your workaround doesn't work for me. Is there another solution? > > > > This don't work: pdbedit -P "maximum password age" -C 4294967294 > > > > I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files > > don't have changed, or? > > I was told on IRC not to use pdbedit for changing the password aging > information in Samba, but to instead use "net sam" to set policy. > > You should be able to set the maximum password age using the following > command: > > # net sam policy set "maximum password age" 4294967294 > > You can set the following policy attributes this way (this is output > from "net sam policy list"): > > min password length > password history > user must logon to change password > maximum password age > minimum password age > lockout duration > reset count minutes > bad lockout attempt > disconnect time > refuse machine password change > > HTH, > Mike > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
From: Richard Lamboj on 11 Mar 2010 16:10 Hello, okay i have something forgotten. Its a 64 Bit System. So well i only could use a signed 32 bit int? Kind Regards Richi -------- Original-Nachricht -------- > Datum: Thu, 11 Mar 2010 21:52:53 +0100 > Von: "Richard Lamboj" <Richard.Lamboj(a)gmx.at> > An: samba(a)lists.samba.org > Betreff: Re: [Samba] Your password expires today problem > Hello, > > server-p:/# net sam policy set "maximum password age" 4294967294 > Account policy "maximum password age" value was: -2 > Account policy "maximum password age" value is now: -2 > > Is that Output Normal? > > Kind Regards > > -------- Original-Nachricht -------- > > Datum: Thu, 11 Mar 2010 12:58:44 -0500 > > Von: "Michael B. Trausch" <mike+gmane(a)trausch.us> > > An: samba(a)lists.samba.org > > Betreff: Re: [Samba] Your password expires today problem > > > On 03/11/2010 02:04 AM, Richard Lamboj wrote: > > > i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is > > > already a bug report. > > > > > > Your workaround doesn't work for me. Is there another solution? > > > > > > This don't work: pdbedit -P "maximum password age" -C 4294967294 > > > > > > I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files > > > don't have changed, or? > > > > I was told on IRC not to use pdbedit for changing the password aging > > information in Samba, but to instead use "net sam" to set policy. > > > > You should be able to set the maximum password age using the following > > command: > > > > # net sam policy set "maximum password age" 4294967294 > > > > You can set the following policy attributes this way (this is output > > from "net sam policy list"): > > > > min password length > > password history > > user must logon to change password > > maximum password age > > minimum password age > > lockout duration > > reset count minutes > > bad lockout attempt > > disconnect time > > refuse machine password change > > > > HTH, > > Mike > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > -- > GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! > Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 > > -- > GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! > Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba -- GMX DSL: Internet, Telefon und Entertainment für nur 19,99 EUR/mtl.! http://portal.gmx.net/de/go/dsl02 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
From: Michael B. Trausch on 11 Mar 2010 20:20 On 03/11/2010 03:52 PM, Richard Lamboj wrote: > Hello, > > server-p:/# net sam policy set "maximum password age" 4294967294 > Account policy "maximum password age" value was: -2 > Account policy "maximum password age" value is now: -2 > > Is that Output Normal? > Looks like there is some wrapping going on there. Try: # net sam policy set "maximum password age" 4294967291 That said, I don't know why there would be wrapping. An unsigned 32-bit integer's maximum value is 4294967295, so 4294967294 (the value that you used) should be something that would fit. I don't know what would cause that to happen that way. --- Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
From: Richard Lamboj on 12 Mar 2010 02:10
Good Morning, Its definitly a signed 32 bit int: net sam policy set "maximum password age" 4294967291 Account policy "maximum password age" value was: -1 Account policy "maximum password age" value is now: -5 Does not work: net sam policy set "maximum password age" never Account policy "maximum password age" value was: 2147483647 Account policy "maximum password age" value is now: -1 Does also not work: net sam policy set "maximum password age" 2147483647 Account policy "maximum password age" value was: -5 Account policy "maximum password age" value is now: 2147483647 So when i'am using "never" it will be set to -1, so it must be a signed integer and this has a maximal value of 2147483647. Napalm and a new Job on the Beach could be the Solution... King Regards Richi Am Friday 12 March 2010 02:14:10 schrieb Michael B. Trausch: > On 03/11/2010 03:52 PM, Richard Lamboj wrote: > > Hello, > > > > server-p:/# net sam policy set "maximum password age" 4294967294 > > Account policy "maximum password age" value was: -2 > > Account policy "maximum password age" value is now: -2 > > > > Is that Output Normal? > > Looks like there is some wrapping going on there. Try: > > # net sam policy set "maximum password age" 4294967291 > > That said, I don't know why there would be wrapping. An unsigned 32-bit > integer's maximum value is 4294967295, so 4294967294 (the value that you > used) should be something that would fit. I don't know what would cause > that to happen that way. > > --- Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |