[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Ppolicy - password history



Andris.Eiduks@tietoenator.com wrote:

Then do You recommend use only clearteaxt password from *client* side ?

Yes. Specifically, the client should always use the PasswordModify extended operation, it should not use LDAPModify on the userPassword attribute. (For one thing, there are no guarantees that a particular server even uses the userPassword attribute for anything.)


--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  OpenLDAP Core Team            http://www.openldap.org/project/