Author Topic: Auto Expiry of Passwords = 365 Days  (Read 12968 times)

itiab

  • Zen Apprentice
  • *
  • Posts: 5
  • Karma: +2/-0
    • View Profile
Auto Expiry of Passwords = 365 Days
« on: October 20, 2015, 10:59:25 pm »
Zentyal automatically sets user password expiry using Samba, to 365 day ( 1 year) on installation
There is no way of setting this age limit or removing expiry from the main Zentyal portal, in either commercial or community editions

There is no way to fix the issue of expiry notices hitting users other than to manually change each user’s password in the User area. You cannot set a password to not expire under the Zentyal portal.

I see this as a major bug - password expiry, aging, and non-expiry are vital for Admins managing users.

Two ways to resolve:
1 – Manually reset user passwords
2 – Do as Rafael suggested via command line.  ( http://rafaelwolf.com/?p=1045 )

Be aware Rafaels command line for showing the settings works, his command line for fixing the settings doesn't as it is missing a hypen - see below

Command to show your settings: samba-tool domain passwordsettings show
Command to change your settings: samba-tool domain passwordsettings set –max-pwd-age=0 NOTE — this doesn’t work as -max-pwd-age should be --max-pwd-age

The reason it didn’t work is the –max-pwd-age=0 needs TWO Hyphens: Shown below.

sudo samba-tool domain passwordsettings set –max-pwd-age=0

To get into the command line you will need a tool like Putty ( http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe ) which you can download and run without installation.

When the command line comes up, log in as a user with admin (super user) abilities.

Run the commands above using sudo e.g.

sudo samba-tool domain passwordsettings show
sudo samba-tool domain passwordsettings set –max-pwd-age=0

The first time you use sudo it will ask you for your password – to elevate your privileges to full admin access level.

If you cant log in using putty, then you will have to log in from the command line of the Zentyal Server.

desperados

  • Zen Monk
  • **
  • Posts: 64
  • Karma: +4/-0
    • View Profile
Re: Auto Expiry of Passwords = 365 Days
« Reply #1 on: January 31, 2017, 12:16:16 pm »
is this bug fixed ?
this workaround works for me, but in above post there is ONE hyphen, not TWO like this (this is my command):

Code: [Select]
sudo samba-tool domain passwordsettings set --max-pwd-age=90
thanks
« Last Edit: January 31, 2017, 12:28:25 pm by desperados »