Re: ppolicy & sambaNTPassword

[Christian Manal <moenoel@informatik.uni-bremen.de>]

Ralf Zimmermann schrieb:
> Hi all,
> 
> I  have  a  problem  with  overlay  ppolicy and  samba.  My  samba  backend  is
> openldap-2.4.20. I have a default ppolicy and a pwdCheckModule. If I change the
> userPassword all works fine. I read the  slapo-ppolicy man page and I know that
> the  only pwdAttribute  is  userPassword.  If I  change  the userPassword  with
> smbpasswd the policy works also fine. But if I want to change the Password with
> a Windows  client the problem begins.  The sambaNTPassword is set  everytime to
> the  new Password  because the  ppolicy overlay  checks only  the userPassword.
> So  the  both  Passwords  are  different  and  there  is  no  control  for  the
> sambaNTPassword.
> 
> Exists any solution or a workaround for this problem.
> 
> Any help is appreciated.
> 
> Mit freundlichen Gruessen
> Ralf Zimmermann
> 

Hello Ralf,

you should take a look at the option 'ldap passwd sync' in the smb.conf
manpage. I would also recommend to take a look at the smbk5pwd overlay
if you don't already use that.


Best regards,
Christian Manal