I also had similar issues. I remember if you change those settings in configuration files, the new users will get the settings right but the users created before that configuration change willl not be affected.
One more thing to check is defaultMaxPasswordAge setting in /etc/smbldap-tools/smbldap.conf file. What is it set to? I have commented out that entry in my SAMBA+LDAP setup. Thanks, Up -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
