Bug 58781 - Better documentation for samba password requirement settings
Summary: Better documentation for samba password requirement settings
Status: NEW
Alias: None
Product: UCS
Classification: Unclassified
Component: Samba4
Version: UCS 5.2
Hardware: Other Linux
: P5 normal
Target Milestone: ---
Assignee: Samba maintainers
QA Contact: Samba maintainers
URL:
Keywords:
Depends on: 49656
Blocks:
  Show dependency treegraph
 
Reported: 2025-11-04 17:33 CET by Dirk Ahrnke
Modified: 2025-11-04 17:43 CET (History)
5 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.103
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID: 05017
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Ahrnke univentionstaff 2025-11-04 17:33:32 CET
+++ This bug was initially created as a clone of Bug #49656 +++

Better documentation for samba password requirement settings

The documentation under:
https://docs.software-univention.de/manual.html#users:password:samba
suggest that these settings are only relevant for Windowsclients, but in my tests these were also used for the selfservice, the umc password change (in the hamburger menu) and passwd. I guess all of these use kerberos in some way?

It would be nice if password policies were working with samba, that would make this bug unnecessary :)

Previous discussions about that:
bug 35809
bug 38749
bug 45128
bug 42592
Comment 1 Dirk Ahrnke univentionstaff 2025-11-04 17:38:39 CET
In addition to the remarks in the initial bugreport we should consider to document the usage of FGPP/PSO. 
The status of Bug 45128 indicates that they are supported in our Samba-implementation (even without the availablity somewhere in UMC)
Customer need to apply different password policies especially in School environments.