Bug 35071

Summary:	Overview about locked users in the domain
Product:	UCS	Reporter:	Michel Smidt <michelsmidt>
Component:	Samba4	Assignee:	Lukas Oyen <oyen>
Status:	CLOSED FIXED	QA Contact:	Arvid Requate <requate>
Severity:	normal
Priority:	P5	CC:	gohmann, oyen, requate
Version:	UCS 4.2	Flags:	requate: Patch_Available+
Target Milestone:	UCS 4.2-2-errata
Hardware:	Other
OS:	Linux
See Also:	https://forge.univention.org/bugzilla/show_bug.cgi?id=35072
What kind of report is it?:	Feature Request	What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	1: Will affect a very few installed domains	How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.023	Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Attachments:	Search for locked out Samba users Testscript for `univention-samba-lockedout`

Description Michel Smidt 2014-06-06 09:48:47 CEST

By customer request.

Since UCS 3.2 erratum 85 samba supports the domain account lockout with the command: samba-tool domain passwordsettings

The customer would like to get a possibility to the see all locked user in the domain.

Comment 1 Lukas Oyen

2016-09-12 14:02:42 CEST

Created attachment 7996 [details]
Search for locked out Samba users

Implementation of the requested feature using `univention-s4search` internaly. All the authentication options are passed through.

The name of the tool should be discussed.

Comment 2 Lukas Oyen

2016-09-12 14:03:42 CEST

Created attachment 7997 [details]
Testscript for `univention-samba-lockedout`

Adapted from: https://forge.univention.org/bugzilla/attachment.cgi?id=6561

Comment 3 Lukas Oyen

2017-09-19 16:11:56 CEST

Committed in 679b140, YAML 11d064b.

Comment 4 Arvid Requate

2017-10-17 14:53:09 CEST

Ok, I had to do a trivial adjustment to the script to properly interpret the samba-tool domain passwordsettings output of

Account lockout duration (mins): 0

as the default (30 min).

Committed in e3b95cdfca, YAML ac7e59db48.

Otherwise the script works.

Comment 5 Arvid Requate

2017-10-18 12:02:39 CEST

<http://errata.software-univention.de/ucs/4.2/200.html>