Hi Rafael, my post again – the first time it lost part of the post – not sure why but i did use a greater than / less than sign to show whee a command prompt may occur and make an arrow – possibly part of the post get redacted by safge code or something.

Firstly, my thanks for the post – helped me a lot.

I can confirm that Zentyal automatically sets user password expiry using Samba, to 365 day ( 1 year)

There is no way of setting this from the main Zentyal portal, in either commercial or community editions

There is no way to fix this issue other than to manually change each user’s password in the User area. you cannot set a password to not expire under the Zentyal portal.

Two ways to resolve:
1 – Manually reset user passwords
2 – Do as Rafael suggested via command line.

Be aware Rafaels command line for showing the settings works, his command line for fixing the settings doesn’t seem to.

Command to show your settings: samba-tool domain passwordsettings show
Command to change your settings: samba-tool domain passwordsettings set –max-pwd-age=0 NOTE — this doesn’t work in Zentyal 3.2.17

The reason it didn’t work is the –max-pwd-age=0 needs TWO Hyphens: Shown below.

sudo samba-tool domain passwordsettings set –max-pwd-age=0

To get into the command line you will need a tool like Putty ( http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe ) which you can download and run without installation.

When the command line comes up, log in as a user with admin (super user) abilities.

Run the commands above using sudo e.g.

sudo samba-tool domain passwordsettings show
sudo samba-tool domain passwordsettings set –max-pwd-age=0

The first time you use sudo it will ask you for your password – to elevate your privaleges to full admin access level.

If you cant log in using putty, then you will have to log in from the command line of the Zentyal Server.

I’m going to add this as a flaw, todo in Zentyal – feel free to vite it up as a feature that is required.

I’m going to add a couple of keywords to this reply – feel free to remove them, but it should help others with the same problem.

Zentyal User Active Directory Password Expiry Samba Password Expiry
User passwords expiring 365 days ( 1year ) aftrer installing Zentyal.

Excellent, nice simple fix. This happened to me today. That means this is Zentyal’s 1 year bithday as my server (well, this build at least).

Great help Rafael, you’ve been my saviour a few times now!