Re: [Samba] winbind cache time

--===============0979585854==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="=-QoZ2IG+BkW846ZR6iQ+H"


--=-QoZ2IG+BkW846ZR6iQ+H
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Mon, 2005-11-28 at 12:31 -0600, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>=20
> Adam Clark wrote:
>=20
> | http://lists.samba.org/archive/samba...ry/027095.htm=
l
> |
> | Which confused me a bit.
>=20
> Ignore that mail. Out of date.
>=20
> | Is the argument to "winbind cache time" in seconds?
> | And what is the default value for this parameter?
>=20
> yes. it's in seconds. Default is 5 minutes (300 seconds).
>=20
> | With that in mind, how long after a password change can
> | a user be guaranteed To be authenticated properly with ntlm_auth?
>=20
> Winbindd does not cache passwords. So the answer
> really depends on your DC. There was a Windows 2003 bug
> where the DC would continue to authenticate the old password
> for a period of time.

I think it's claimed to be a feature, and as far as my tests showed, it
appeared in Win2k3 SP1

Andrew Bartlett

--=20
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Student Network Administrator, Hawker College http://hawkerc.net

--=-QoZ2IG+BkW846ZR6iQ+H
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBDkusbz4A8Wyi0NrsRAhcRAJ4gtfX2UaXGQRiMC/GbxDl+EL7oEQCcC7o6
ric1paJJ6V12bw8/rtR6xwo=
=R6AR
-----END PGP SIGNATURE-----

--=-QoZ2IG+BkW846ZR6iQ+H--


--===============0979585854==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--===============0979585854==--