Re: smbk5pwd and ppolicy working together

[Howard Chu <hyc@symas.com>]

Ryan Steele wrote:
> I realize that 'only' is what I want and that's what I'm using, however
> I think smbk5pwd is working.  The two snippets below are show the
> differences after a Windows user changes his password (from the
> ctrl+alt+delete menu):

Don't guess. Turn up the slapd debug level and show what it logs when you 
perform the actual password change.

Also, don't make us guess - post the relevant portion of your slapd configuration.

> sambaPwdCanChange: 1207134133
> sambaPwdMustChange: 2147483647
> userPassword:: e1NTSEF9UkxaOUdIZnVhNkV2ejBzS0JKNVVWQ2pVOHNnR29Ma1Q=
> sambaPwdLastSet: 1207134133
> sambaLMPassword: d85774cf671a9947aad3b435b51404ee
> sambaNTPassword: baac3929fabc9e6dcd32421ba94a84d4
> pwdChangedTime: 20080402110213Z
> entryCSN: 20080402110213Z#000001#00#000000
> modifiersName: cn=admin,dc=example,dc=com
> modifyTimestamp: 20080402110213Z
>
>
> sambaPwdMustChange: 2147483647
> sambaPwdCanChange: 1207137250
> userPassword:: e1NTSEF9NWMveHkxSkVtZDcvcnZuWFZ4a3dtMVJsUnAzUGdEQW4=
> sambaPwdLastSet: 1207137250
> sambaLMPassword: 614a6376feed376daad3b435b51404ee
> sambaNTPassword: d01b4a346f59e594f299a41a48126188
> pwdChangedTime: 20080402115410Z
> entryCSN: 20080402115410Z#000001#00#000000
> modifiersName: cn=admin,dc=example,dc=com
> modifyTimestamp: 20080402115410Z


--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/