Loosen password policy in setup_ad_server.sh

Otherwise we can't set stupid, weak passwords for administrator.

Signed-off-by: Martin Schwenke <martin@meltin.net>

diff --git a/base/all/root/scripts/setup_ad_server.sh b/base/all/root/scripts/setup_ad_server.sh
index 4802f1029e60af3e363b9c6dc3f87150f1364fc6..c10aa7b62ba8f4ac8946f74b06d267364b9d1c38 100755 (executable)
--- a/base/all/root/scripts/setup_ad_server.sh
+++ b/base/all/root/scripts/setup_ad_server.sh
@@ -28,7 +28,6 @@ provision --realm="@@DOMAIN@@" \
        --domain="@@WORKGROUP@@" \
        --host-ip="$hostip" \
        --host-name="@@AD_NETBIOS_NAME@@" \
-       --adminpass="@@AD_ADMIN_PASS@@" \
        --server-role="domain controller" \
        --function-level="@@AD_FUNCTION_LEVEL@@" \
        --dns-backend="SAMBA_INTERNAL"
@@ -42,9 +41,12 @@ sed -i -e '/server services/a\
 
 # Add users/groups
 echo "Adding users and groups"
+samba-tool domain passwordsettings set --min-pwd-length=3
+samba-tool domain passwordsettings set --complexity=off
 samba-tool user add test test01
 samba-tool user setexpiry --noexpiry Administrator
 samba-tool user setexpiry --noexpiry test
+samba-tool user setpassword administrator --newpassword="@@AD_ADMIN_PASS@@"
 
 # Samba start-up
 cat >> /etc/rc.d/rc.local <<EOF