if you go into your web front end
LDAP directory ->samba folder
on the right it shows " samba domain"
select edit
this and other values never get set or retained.
every time it shows the same error.
Also it sets the default complexity requirements TRUE
so the first time you go in & save it can create problems with the other policy
also there may be a secondary bug… it sets the minimum time to 1 day.
but if an admin resets the user pw & sets “user has to change pw on next login”
then the user cannot change the pw, because the admin time stamp say less than a day
once i set this to 1 minute, THEN the user can reset their pw on the windows computer.