Tuesday, January 22, 2008

PDBedit running on SME Server

do the below step on putty
1 mkdir -p /etc/e-smith/templates-custom/etc/smb.conf
2 cp /etc/e-smith/templates/etc/smb.conf/11passdbBackend
3 /etc/e-smith/templates-custom/etc/smb.conf/
4 smb restart service
5 expand-template /etc/smb.conf
6 pdbedit -i smbpasswd

next ... read the below

Domain Account Policy Managment

To view the domain account access policies that may be configured execute:

root# pdbedit -P ?
No account policy by that name
Account policy names are :
min password length
password history
user must logon to change password
maximum password age
minimum password age
lockout duration
reset count minutes
bad lockout attempt
disconnect time
refuse machine password change

The following command execution will achieve these settings:

root# pdbedit -P "min password length" -C 8
account policy value for min password length was 5
account policy value for min password length is now 8
root# pdbedit -P "password history" -C 4
account policy value for password history was 0
account policy value for password history is now 4
root# pdbedit -P "maximum password age" -C 90
account policy value for maximum password age was 4294967295
account policy value for maximum password age is now 90
root# pdbedit -P "minimum password age" -C 7
account policy value for minimum password age was 0
account policy value for minimum password age is now 7
root# pdbedit -P "bad lockout attempt" -C 8
account policy value for bad lockout attempt was 0
account policy value for bad lockout attempt is now 8
root# pdbedit -P "lockout duration" -C -1
account policy value for lockout duration was 30
account policy value for lockout duration is now 4294967295

No comments: