[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: LDAP and PAM: account is expired, but pam_ldap allows authentification
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
>>>
>>> shadowExpire
>>> shadowLastChange
>>> shadowMin
>>> shadowMax
>>>
>>> to make the account expired (OpenLDAP used to run NT domain), but when I
>>> ssh to a server using pam_ldap authentication, it is still allowed to login.
This look to be a question where the user does not know what is responsible for the issue he is seeing, but does relate to his attempt to use OpenLDAP. He is correct in asking here, and helpfully pointing him in the correct direction is the right course of action, rather than saying "you are wrong to ask this here". This problem may have been to him related to missing elements from his user objects (which would have been openldap) or it was anything else.
Also you said
>
> As a reminder - the OpenLDAP-technical list is for the discussion of actual OpenLDAP software, as well as how to make other software interoperate with it. Questions that are purely about how to use 3rd party software "foo" work at all do not belong on this list.
>
This counts as "other software interoperate with it." from where I am sitting. I have seen many questions like this, and I think it should be something we answer and point people in the correct direction of rather than saying "you'll get no help here"
So instead of going to a doctor to be referred to a specialist, you will go straight to a specialist without knowing what your problem is? makes complete sense.
> --
> -- Howard Chu
> CTO, Symas Corp. http://www.symas.com
> Director, Highland Sun http://highlandsun.com/hyc/
> Chief Architect, OpenLDAP http://www.openldap.org/project/
William Brown
pgp.mit.edu
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)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=bAdY
-----END PGP SIGNATURE-----