I'm running Samba 4.2.0rc3 for test implementation. I've enabled lockout policy using samba-tools. I've noticed below bugs.
Server Environment: CentOS 6.x
Client Environment: CentOS 6.x/Windows 7
1. Password policy is not working using Default Domain Policy using Windows GPMC.
2. Bad password count working fine using non-windows clients but on windows platform bad password count gets doubled (For single bad password attempt it counts 2).
3. GP result from windows box shows each configured GPO empty and so comes under denied/not applied, but RSOP reflects those settings.
Rest seems to be working perfectly, Many thanks for your great work..!!
Andrew, can you please check if 2. is a real bug we should fix for 4.2.0?
(In reply to Om Parkash Maurya from comment #0)
Samba doesn't look at GPOs itself at all yet, sorry.
This is tracked in bug #6613.
I don't think this is a 4.2.0 blocker
Fixed with 978bc8681e74ffa17f96fd5d4355094c4a26691c in Samba 4.5rc1
*** Bug 11539 has been marked as a duplicate of this bug. ***