[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: shadowAccount

Howard Chu wrote:

-----Original Message-----
From: owner-openldap-software@OpenLDAP.org
[mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Schabel Markus


I'm currently working on converting the smbldap-tools to use the shadowAccount-objectClass.

I'm not sure about the mapping between /etc/shadow and shadowAccount.

Is "Days after password expires that account is disabled" the shadowExpire attribute?
Is "Days since Jan 1, 1970 that account is disabled" the shadowInactive attribute?
Is "A reserved field" the shadowFlag attribute?

struct spwd { char *sp_namp; /* user login name */ uid char *sp_pwdp; /* encrypted password */ userpassword long sp_lstchg; /* last password change */ shadowLastChange int sp_min; /* days until change allowed. */ shadowMin int sp_max; /* days before change required */ shadowMax int sp_warn; /* days warning for expiration */ shadowWarning int sp_inact; /* days before account inactive */ shadowInactive int sp_expire; /* date when account expires */ shadowExpire int sp_flag; /* reserved for future use */ shadowFlag }

-- Howard Chu
Chief Architect, Symas Corp. Director, Highland Sun
http://www.symas.com http://highlandsun.com/hyc
Symas: Premier OpenSource Development and Support

many thanks!