Zentyal Forum, Linux Small Business Server

Zentyal Server => Directory and Authentication => Topic started by: basselope on January 20, 2020, 12:26:30 pm

Title: Enforcing password complexity: where to start?
Post by: basselope on January 20, 2020, 12:26:30 pm

Situation: mix of Windows 10 and Ubuntu clients with users and groups configured on a Zentyal domain (no Windows servers).

Should I use RSAT and Windows policies or samba passwordsettings?

The reason of my questions are described here -> https://serverfault.com/questions/780934/password-policy-in-active-directory-inactivation-of-complexity-without-effect

Title: Re: Enforcing password complexity: where to start?
Post by: doncamilo on January 20, 2020, 07:33:03 pm

 :)

I use ever samba-tool (however in samba 4.7 doesn't implement the "fine grain" features that offer the 4.9 version), but I know some people using GPOs.

Using GPOs solve your problem if your clients are Windows machines, but these policies will not apply to GNU/Linux flavors.

Further, this way, you will not need to care about the sysvol replicatión through rsync (if you have some more domain controllers).  XD

Cheers!