SAMBA4 AD: change the user password after the first login

tommycloud · September 27, 2017, 5:46am

Thanks for your help.
I’m trying to use nethserver in my company, all things works great but i just wondering is there an option that requires user change their password after first login, after user created with a initial password?
Thanks

mrmarkuz · September 27, 2017, 7:00am

Good morning @tommycloud,

it should be possible with RSAT Tools under Windows.

For command line I found this:

pdbedit -u user --pwd-must-change-time 0

Sources:

https://lists.samba.org/archive/samba/2005-April/104663.html

tommycloud · September 30, 2017, 1:16am

Thanks for your help.
So i need to do this everytime i created a user.
I’d prefer there’s an option for this in the web console while creating user.
Thanks

stephdl · September 30, 2017, 7:39am

github.com

NethServer/nethserver-dc/blob/master/root/etc/e-smith/events/actions/nethserver-dc-password-set#L44


echo "[NOTICE] Skipping user ${USER}, it doesn't belong to our domain."
exit 0
fi


if ! [ -f "${FILE}" ]; then
echo "[ERROR] Password file not found"
exit 1
fi


exec expect -f - <<EOF
spawn /usr/bin/systemd-run -M nsdc -q -t /usr/bin/samba-tool user setpassword "${USER%@${DOMAIN}}"
log_user 1
expect {
-ex "New Password: " {
     send -- [read -nonewline [open "${FILE}" r]]
     send "\n"
     expect {
        "Changed password OK" {
           exit 0
        }
        -ex "Retype Password: " {

it could be imagined a check box (change password the next login) then use the samba-tool set-password option : --must-change-at-next-login

In fact it is a real common case for a system administrator. In my company the first password is a dummy one ( ‘Bonjour123’) but when I login the first time I set a new password following the password policy.

@dev_team something should be done here

giacomo · October 2, 2017, 10:00am

Shouldn’t be so hard to do (at least the backend part).

Added to the todo list: https://github.com/orgs/NethServer/projects/1#card-4928555

stephdl · July 9, 2018, 6:49pm

the expect function is broken by the --must-change-at-next-login setting, need to check.

The symptom are that the user appears blocked after the password change

stephdl · July 9, 2018, 8:43pm

Same behaviour as @Wellington_Rodrigues the command works without errors but at the first login the user is not directed to change his password

Wellington_Rodrigues · July 10, 2018, 1:01pm

Yes, it didn’t work.
I had to create a default password for all users here in the company. To change the password we use CRLT + ALT + DEL >> Change a password.