The command 'samba-tool user setexpiry' doesn't work! Reproducer: make testenv SELFTEST_TESTENV=ad_member $ bin/samba-tool user setexpiry alice --days=4 --URL=ldap://localdc.samba.example.com --username=administrator --password=locDCpass1 $ bin/rpcclient ncacn_np:localdc -UAdministrator%locDCpass1 -c "queryuser 1105" User Name : alice ... Password last set Time : Tue, 01 Aug 2017 17:50:08 CEST Password must change Time: Tue, 12 Sep 2017 17:50:08 CEST The must change time is 41 days away and not 4 days as set!