Password Policies

davidep · January 28, 2022, 9:36am

Bugfix (partial) released! Thank you again @mrmarkuz

The bug is fixed for new installations
The smb.conf must be changed manually to apply the fix to existing installations: follow the procedure documented at nethserver-dc — NethServer 7 documentation

github.com/NethServer/dev

Password policy is not respected on samba AD clients

opened 09:48PM - 21 Dec 21 UTC

closed 09:27AM - 28 Jan 22 UTC

mrmarkuz

bug verified

Samba AD uses Windows password policy for clients instead of using the strong pa…ssword policy defined in NethServer. A check password script can be defined in `smb.conf` by using the `check password script` option. This [script](https://gist.github.com/mrmarkuz/9b05e0bb10e74a6e101940ffb5066a71) forces the NethServer password policy on Samba clients. **Steps to reproduce** - Create AD User in server manager using strong password policy - Change the password from a Samba client to a weak password for example without special char **Expected behavior** The password is not accepted. **Actual behavior** The password is accepted. **Components** nethserver-dc-1.8.2-1 **See also** https://community.nethserver.org/t/password-policies/19476/18?u=mrmarkuz ---- Thanks to Wellington Rodrigues for raising the issue.