[Date Prev][Date Next]
Re: Inquiry Regarding Force Change Password
On Sunday 03 May 2009 01:16:20 Carlo Camerino wrote:
> Hi Everyone,
> I'm new to openldap and was just wondering if OpenLDAP implements force
> change password policy?
Please see 'man slapo-ppolicy'.
> Does it expire the password of the user after a specified number of days?
It can. See above.
> Also can I specify a list of commonly used passwords so that users cannot
> use it?
Not out-the-box, but there is a module that can be used as a 'pwdCheckModule'
that can do this, see http://open.calivia.com/projects/openldap . (This is
shipped in some Linux distributions). If compiled with cracklib support, it
will check the cracklib dictionaries (not strictly a "list of commonly used