RE: Rép. : Re: change password event andopenLdap (overlay ppolicy)(error)

["Eudes LEDUCQ" <LEDUCQ@hec.fr>]

Hi,
 
it's work thx.  So I have a new problem, when i change a password
(small than 5) the server don't check the syntax. I don't understand why
? do you know what i must add to the user entry to have the
pwdChangedTime attribute ?
 
thx
 
I have configured my slap.conf like this:

# password policy
overlay ppolicy
ppolicy_default "cn=default,ou=policies,dc=myDirectory,dc=fr"
 
the server start with out problem.
 
The entry corresponding to default like this:
 
dn: cn=default,ou=policies,dc=mydirectory,dc=fr
objectclass: pwdPolicy
objectclass: 
objectclass: pwdPolicyChecker
cn: default
pwdAttribute : userPassword
pwdCheckQuality :2
pwdMinLength: 5
pwdLockout: TRUE
pwdLockoutDuration : 60
pwdMaxFailure: 3
pwdInHistory: 1


>>> "Spicer, Kevin" <KevinS@bmrb.co.uk> 02/09 11:12  >>>
> From: Eudes LEDUCQ [mailto:LEDUCQ@hec.fr] 
> i try to add a default pwdPolicy entry, like this
> 
> dn: cn=default,o=policies,dc=mydirectory,dc=fr
> objectclass: pwdPolicy
> objectclass: pwdPolicyChecker
> objectclass: top
> cn: default
> pwdAttribute : userPassword
> 
> i have this error :
> 
> ldap_add: Internal (implementation specific) error (80)
>         additional info: no structuralObjectClass operational
> attribute 


Try something more like this....
dn: cn=default,o=policies,dc=mydirectory,dc=fr
objectClass: top
objectClass: device
objectClass: pwdPolicy
cn: default
pwdAttribute: 2.5.4.35

=================================================================

BMRB wins two BMRA awards - http://www.bmrb.co.uk 
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB Limited accepts no liability 
in relation to any personal emails, or content of any email which 
does not directly relate to our business.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++