[Date Prev][Date Next]
(ITS#3573) 2.3.1alpha & ppolicy modules
Full_Name: Kevin Spicer
OS: Solaris 9
Submission from: (NULL) (220.127.116.11)
When using the ppolicy module with 2.3.1 alpha it is not possible for a user to
change their own password using the ldappasswd program, they get an Insufficient
Logs revealed that the user was not being granted permission to change the
PwdChangedTime attribute - obviously you don't want users to change this.
I applied the fix Howard previously suggested for a similar issue on an earlier
version, adding NO-USER-MODIFICATION to the pwdChangedTime, pwdGraceUseTime,
pwdExpirationWarned, pwdHistory attributes in ppolicy.c. This has solved the
problem for me.