[Samba] User policy in samba

[Prema]

Hi,

Is it possible to set User specific password policies in Samba4.
Say I wan to set the Password length of a particular user to be "7" where
as my domain policy is "10"

How to do this in samba4?

--
Regards.,
Prema S
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[Gregory Sloop]

P> Is it possible to set User specific password policies in Samba4.
P> Say I wan to set the Password length of a particular user to be "7" where
P> as my domain policy is "10"

P> How to do this in samba4?

The only way I can think of that would apply some policies to some
users and a different policy to others would be a GPO. But I'm not
entirely sure if password complexity reqs. can be applied selectively
via GPO. [I think so, but I've never tried it - and the docs sure
look like it's possible.]

In any case, if it IS possible, it's not a "Samba" thing, it's a AD GPO
thing and looking at the docs from MS would be the place to look/ask.

-Greg

[Michael Wood]

Samba currently does this via the "samba-tool domain passwordsettings"
command.

Search for "passwordsettings" on the following page:

https://wiki.samba.org/index.php/Samba-tool-external

On 22 May 2013 14:34, Prema <pre...@gmail.com> wrote:

> Hi,

>
> Is it possible to set User specific password policies in Samba4.

> Say I wan to set the Password length of a particular user to be "7" where

> as my domain policy is "10"
>

> How to do this in samba4?
>

> --
> Regards.,
> Prema S

> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>

--
Michael Wood <esio...@gmail.com>

[Michael Wood]

Hi

Sorry, I did not read your e-mail properly.

I don't believe it's currently possible in Samba to do this on a per user
basis.

[Marc Muehlfeld]

Hello,

Am 22.05.2013 16:24, schrieb Gregory Sloop:
>> Is it possible to set User specific password policies in Samba4.
>> Say I wan to set the Password length of a particular user to be "7" where
>> as my domain policy is "10"
>
>> How to do this in samba4?
>

> The only way I can think of that would apply some policies to some
> users and a different policy to others would be a GPO. But I'm not
> entirely sure if password complexity reqs. can be applied selectively
> via GPO. [I think so, but I've never tried it - and the docs sure
> look like it's possible.]

GPO won't work for that:
https://wiki.samba.org/index.php/Samba4/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F


Regards,
Marc

[Pekka L.J. Jalkanen]

On 22.5.2013 19:44, Marc Muehlfeld wrote:
> Hello,
>
> Am 22.05.2013 16:24, schrieb Gregory Sloop:
>>> Is it possible to set User specific password policies in Samba4.
>>> Say I wan to set the Password length of a particular user to be "7"
>>> where
>>> as my domain policy is "10"
>>
>>> How to do this in samba4?
>>
>> The only way I can think of that would apply some policies to some
>> users and a different policy to others would be a GPO. But I'm not
>> entirely sure if password complexity reqs. can be applied selectively
>> via GPO. [I think so, but I've never tried it - and the docs sure
>> look like it's possible.]
>
> GPO won't work for that:
> https://wiki.samba.org/index.php/Samba4/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F

Note that Samba should still serve those GPO objects to clients that
process them. Unmodified Windows clients should thus still obey those
policies, but Samba as a server just doesn't enforce them, which also
means that non-Windows clients will ignore them. At least that's how I'm
understanding it.

Pekka L.J. Jalkanen