samba: force user to change password on first logon

petrjanda

When I create an account, i want the user to change their password on the first logon. How do I do that?
_________________
There is, a not-born, a not-become, a not-made, a not-compounded. If that unborn, not-become, not-made, not-compounded were not, there would be no escape from this here that is born, become, made and compounded. - Gautama Siddharta

Spooky Ghost · Posted: Thu Feb 17, 2005 1:25 pm Post subject:

It depends on your password backend. If it is LDAP it should be a relatively small ldif to change the user account. It it is another method you could check the "obey pam restrictions" directive in smb.conf and then manually expire the user's password.

petrjanda · Posted: Thu Feb 17, 2005 11:12 pm Post subject:

Spooky Ghost · Posted: Fri Feb 18, 2005 12:13 pm Post subject:

An LDIF is a structured data file which allows you to add/modify/delete LDAP directory entries. For example this would create the root entry for the samba backend:

dn: ou=Samba,dc=dingwall,dc=me,dc=uk
objectClass: organizationalUnit
objectClass: top
ou: Samba
description: Samba Domain Information

petrjanda · Posted: Fri Feb 18, 2005 12:51 pm Post subject:

petrjanda · Posted: Wed Feb 23, 2005 10:57 am Post subject:

If I set pwdMustChange to 0, wont it ask the user to change his password everytime he logs on?
_________________
There is, a not-born, a not-become, a not-made, a not-compounded. If that unborn, not-become, not-made, not-compounded were not, there would be no escape from this here that is born, become, made and compounded. - Gautama Siddharta