Hi,

Op 10/1/20 om 8:12 PM schreef Roland Gruber:
just in case, the prompt can be disabled in server profile -> General
settings -> Server settings -> Advanced options.
Thanks!

This is active directory, samba4, not sure if it matters. But:

LAM displays the prompt if:

Reading the user's own DN results in a non-32 return code (no such object)
Not sure how I can tell if that's the case, but I'm guessing that's not the case. There is nothing special about the account.

AND
( No data was returned for the read request
   OR
   The user attribute "pwdreset" is set to TRUE
Attrib doesn't exist

   OR
   The user attribute "passwordexpirationtime" is set and is in the past
The attrib doesn't exist

Can you check in tree view if one of the attributes is set? The
condition to return no data happens when a password change is enforced
via PPolicy.
Not sure about PPolicy... I only remember that from our openldap days that are long gone.

Does lam log anything anywhere about why it would ask me to change the password..?

MJ


_______________________________________________
Lam-public mailing list
Lam-public@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to