Ralf Zimmermann schrieb:
Hi all,
I have a problem with overlay ppolicy and samba. My samba backend is openldap-2.4.20. I have a default ppolicy and a pwdCheckModule. If I change the userPassword all works fine. I read the slapo-ppolicy man page and I know that the only pwdAttribute is userPassword. If I change the userPassword with smbpasswd the policy works also fine. But if I want to change the Password with a Windows client the problem begins. The sambaNTPassword is set everytime to the new Password because the ppolicy overlay checks only the userPassword. So the both Passwords are different and there is no control for the sambaNTPassword.
Exists any solution or a workaround for this problem.
Any help is appreciated.
Mit freundlichen Gruessen Ralf Zimmermann
Hello Ralf,
you should take a look at the option 'ldap passwd sync' in the smb.conf manpage. I would also recommend to take a look at the smbk5pwd overlay if you don't already use that.
Best regards, Christian Manal