Force Windows users to change passwords

[skoontastic]

I have a master/replica set up with OS X Server (10.4.8). The master and replica serve as PDC and BDC for our Windows XP machines as well. Everything has worked really well, except that I can’t force Windows users to change their passwords at next login. If I set an account to change password at next login, the user is prompted to change passwords, they do, Windows says everything’s good to go, and then WHAM! They’re asked to change their password again. And again. And again. It just loops.

Here’s a rundown of what I’ve found:

1. The password does indeed change on the servers.
2. The “Password must be changed at next login” setting is cleared on the Master/PDC, but not on the Replica/BDC. If I clear the check on the Replica/BDC, the user can login fine.
3. I can’t force the setting to replicate manually.

Anyone have any ideas? I’ve talked to Apple, but they won’t touch it because it’s dealing with a Windows client.

It’s mostly an annoyance, but I would love to have this working.

[skoontastic]

Thanks MacTroll, bug filed. I’ll post back if I find anything out.

[jdub]

I have the same issue on a server with 10.4.9 installed.

It could be possible to replace the smbd binary from 10.4.8 and see if that fixes things. But I don’t know how well that will work when 10.4.10 comes, or any updates, etc.

[skoontastic]

The notice I got back from Apple is that the issue is fixed in Leopard Server. Which isn’t a lot of help, since I’m probably not deploying that for at least a year.

[jdub]

Oh great…
Anyway you could post that, or send me a link to how you filed that bug? I just would like to get a statement from Apple saying they are aware of the issue.

Also, how many windows boxes are you using with this?

[Author]

Posts