Raspberry Piで統合認証環境を作ってみる pt.6 samba パスワードポリシー設定

 passwordの複雑性や有効期限の変更を行う。Windowsの管理ツールでは対応していない。

root@raspberry1:/home/pi# /opt/samba/bin/samba-tool domain passwordsettings show

Password informations for domain 'DC=yamatomura,DC=local'

Password complexity: on

Store plaintext passwords: off

Password history length: 24

Minimum password length: 7

Minimum password age (days): 1

Maximum password age (days): 42

Account lockout duration (mins): 30

Account lockout threshold (attempts): 0

Reset account lockout after (mins): 30

root@raspberry1:/home/pi# /opt/samba/bin/samba-tool domain passwordsettings set --complexity=off

Password complexity deactivated!

All changes applied successfully!

root@raspberry1:/home/pi# /opt/samba/bin/samba-tool domain passwordsettings set --min-pwd-age=0

Minimum password age changed!

All changes applied successfully!

root@raspberry1:/home/pi# /opt/samba/bin/samba-tool domain passwordsettings set --max-pwd-age=0

Maximum password age changed!

All changes applied successfully!

root@raspberry1:/home/pi# /opt/samba/bin/samba-tool domain passwordsettings show

Password informations for domain 'DC=yamatomura,DC=local'

Password complexity: off

Store plaintext passwords: off

Password history length: 24

Minimum password length: 7

Minimum password age (days): 0

Maximum password age (days): 0

Account lockout duration (mins): 30

Account lockout threshold (attempts): 0

Reset account lockout after (mins): 30