From: Michael B. Trausch on
On 03/11/2010 02:04 AM, Richard Lamboj wrote:
> i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is
> already a bug report.
>
> Your workaround doesn't work for me. Is there another solution?
>
> This don't work: pdbedit -P "maximum password age" -C 4294967294
>
> I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files
> don't have changed, or?

I was told on IRC not to use pdbedit for changing the password aging
information in Samba, but to instead use "net sam" to set policy.

You should be able to set the maximum password age using the following
command:

# net sam policy set "maximum password age" 4294967294

You can set the following policy attributes this way (this is output
from "net sam policy list"):

min password length
password history
user must logon to change password
maximum password age
minimum password age
lockout duration
reset count minutes
bad lockout attempt
disconnect time
refuse machine password change

HTH,
Mike

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Richard Lamboj on
Hello,

server-p:/# net sam policy set "maximum password age" 4294967294
Account policy "maximum password age" value was: -2
Account policy "maximum password age" value is now: -2

Is that Output Normal?

Kind Regards

-------- Original-Nachricht --------
> Datum: Thu, 11 Mar 2010 12:58:44 -0500
> Von: "Michael B. Trausch" <mike+gmane(a)trausch.us>
> An: samba(a)lists.samba.org
> Betreff: Re: [Samba] Your password expires today problem

> On 03/11/2010 02:04 AM, Richard Lamboj wrote:
> > i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is
> > already a bug report.
> >
> > Your workaround doesn't work for me. Is there another solution?
> >
> > This don't work: pdbedit -P "maximum password age" -C 4294967294
> >
> > I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files
> > don't have changed, or?
>
> I was told on IRC not to use pdbedit for changing the password aging
> information in Samba, but to instead use "net sam" to set policy.
>
> You should be able to set the maximum password age using the following
> command:
>
> # net sam policy set "maximum password age" 4294967294
>
> You can set the following policy attributes this way (this is output
> from "net sam policy list"):
>
> min password length
> password history
> user must logon to change password
> maximum password age
> minimum password age
> lockout duration
> reset count minutes
> bad lockout attempt
> disconnect time
> refuse machine password change
>
> HTH,
> Mike
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

--
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01

--
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Richard Lamboj on
Hello,

okay i have something forgotten. Its a 64 Bit System. So well i only could use a signed 32 bit int?

Kind Regards

Richi

-------- Original-Nachricht --------
> Datum: Thu, 11 Mar 2010 21:52:53 +0100
> Von: "Richard Lamboj" <Richard.Lamboj(a)gmx.at>
> An: samba(a)lists.samba.org
> Betreff: Re: [Samba] Your password expires today problem

> Hello,
>
> server-p:/# net sam policy set "maximum password age" 4294967294
> Account policy "maximum password age" value was: -2
> Account policy "maximum password age" value is now: -2
>
> Is that Output Normal?
>
> Kind Regards
>
> -------- Original-Nachricht --------
> > Datum: Thu, 11 Mar 2010 12:58:44 -0500
> > Von: "Michael B. Trausch" <mike+gmane(a)trausch.us>
> > An: samba(a)lists.samba.org
> > Betreff: Re: [Samba] Your password expires today problem
>
> > On 03/11/2010 02:04 AM, Richard Lamboj wrote:
> > > i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is
> > > already a bug report.
> > >
> > > Your workaround doesn't work for me. Is there another solution?
> > >
> > > This don't work: pdbedit -P "maximum password age" -C 4294967294
> > >
> > > I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files
> > > don't have changed, or?
> >
> > I was told on IRC not to use pdbedit for changing the password aging
> > information in Samba, but to instead use "net sam" to set policy.
> >
> > You should be able to set the maximum password age using the following
> > command:
> >
> > # net sam policy set "maximum password age" 4294967294
> >
> > You can set the following policy attributes this way (this is output
> > from "net sam policy list"):
> >
> > min password length
> > password history
> > user must logon to change password
> > maximum password age
> > minimum password age
> > lockout duration
> > reset count minutes
> > bad lockout attempt
> > disconnect time
> > refuse machine password change
> >
> > HTH,
> > Mike
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>
> --
> GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
> Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
>
> --
> GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
> Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

--
GMX DSL: Internet, Telefon und Entertainment für nur 19,99 EUR/mtl.!
http://portal.gmx.net/de/go/dsl02
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Michael B. Trausch on
On 03/11/2010 03:52 PM, Richard Lamboj wrote:
> Hello,
>
> server-p:/# net sam policy set "maximum password age" 4294967294
> Account policy "maximum password age" value was: -2
> Account policy "maximum password age" value is now: -2
>
> Is that Output Normal?
>

Looks like there is some wrapping going on there. Try:

# net sam policy set "maximum password age" 4294967291

That said, I don't know why there would be wrapping. An unsigned 32-bit
integer's maximum value is 4294967295, so 4294967294 (the value that you
used) should be something that would fit. I don't know what would cause
that to happen that way.

--- Mike

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Richard Lamboj on

Good Morning,

Its definitly a signed 32 bit int:
net sam policy set "maximum password age" 4294967291
Account policy "maximum password age" value was: -1
Account policy "maximum password age" value is now: -5

Does not work:
net sam policy set "maximum password age" never
Account policy "maximum password age" value was: 2147483647
Account policy "maximum password age" value is now: -1

Does also not work:
net sam policy set "maximum password age" 2147483647
Account policy "maximum password age" value was: -5
Account policy "maximum password age" value is now: 2147483647

So when i'am using "never" it will be set to -1, so it must be a signed
integer and this has a maximal value of 2147483647.

Napalm and a new Job on the Beach could be the Solution...

King Regards

Richi

Am Friday 12 March 2010 02:14:10 schrieb Michael B. Trausch:
> On 03/11/2010 03:52 PM, Richard Lamboj wrote:
> > Hello,
> >
> > server-p:/# net sam policy set "maximum password age" 4294967294
> > Account policy "maximum password age" value was: -2
> > Account policy "maximum password age" value is now: -2
> >
> > Is that Output Normal?
>
> Looks like there is some wrapping going on there. Try:
>
> # net sam policy set "maximum password age" 4294967291
>
> That said, I don't know why there would be wrapping. An unsigned 32-bit
> integer's maximum value is 4294967295, so 4294967294 (the value that you
> used) should be something that would fit. I don't know what would cause
> that to happen that way.
>
> --- Mike

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba