[NTLUG:Discuss] configuring samba to force logoff

[Rick Cook]

On Wednesday 25 February 2004 13:09:42, Richard Geoffrion wrote:
> Has anyone had any success in configuring samba to FORCE users to logoff
> the network at night?  I have never found any 'time restriction' 
> settings, but there has to be SOMETHING one can do to make Microsoft
> users log out at night.
>
> Maybe something to prevent them from accessing samba resources until 
> they log off then back on... or how about doing something to the MS 
> client so they have to reboot??


Samba v3.x does provide the capability to set those type parameters with 
its new "user management" features. I stumbled over this after I 
"upgraded" to Samba v3.0 and had the new feature of passwords expiring.


From the pdbedit man page:

       -P account-policy
          Display an account policy

          Valid  policies are: minimum password age, reset count minutes, 
disconnect time, user must logon to change password, password history, 
lockout duration, min password length, maximum password age and bad 
lockout attempt.

          Example: pdbedit -P "bad lockout attempt"

          account policy value for bad lockout attempt is 0

       -C account-policy-value
          Sets an account policy to a specified value. This option may 
only be used in conjunction with the -P option.

          Example: pdbedit -P "bad lockout attempt" -C 3

          account policy value for bad lockout attempt was 0
          account policy value for bad lockout attempt is now 3



Rick