[Date Prev][Date Next]
Re: password change and ppolicy
- To: <firstname.lastname@example.org>
- Subject: Re: password change and ppolicy
- From: "Gustavo Mendes de Carvalho" <email@example.com>
- Date: Fri, 12 Jun 2009 11:31:50 -0300
- Content-language: pt-br
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:to:references :in-reply-to:subject:date:message-id:mime-version:content-type :content-transfer-encoding:x-mailer:thread-index:content-language; bh=ul6jrT0+RDzQWcV14YT7/cpOD70V/u/nAZefs1qdOdI=; b=KqbQFf81JQOhohD7v8PlTPNOaWu9IwZFA+cjRDdPG6bI1/UwfYNGUnZ9rsz1ynop6s GuIrPwCoMKvBYkC4UGAhK0+jO7p0AGVufajArhFc7BkRX4Pe7X5hdV+1+kGMdauOOSGH f4bBeiNjHbORutrUUL8YxNpwVmwzWo/km7reg=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:to:references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding:x-mailer:thread-index :content-language; b=MF1abAsemId8dDILyoXgGcdYa+yIWtc0DNHDpjXUAHQCL/awoH0ph0K1t0fTCaZ/gL 3a8CorahGxMc+sPLl59HApv8UeTwIvqFJzbpU7kf0oB1qqXVyvQlpgUSLaEUEQ0ku2Pg w8ze02/2cgUE6sSe5e2NNbkUBuIy9N9G3ZIXM=
- In-reply-to: <firstname.lastname@example.org>
- References: <email@example.com>
- Thread-index: AcnqjE1NEYQ6gjWsQ6WANnBEfG+LWQA3P4Rg
Suposed that your users has to login in some linux/Unix machine using their
LDAP accounts, I sugest you to create some binary or script to allow your
users to change their passwords invoking ldappasswd command.
I mean, you can create a C program or shell script or even a PHP page, to
validate some weaks in their passwords, like min length, capital letters,
numbers, and so on.
After that, you can call ldappasswd command with all parameters (using
system() call in a C source code) to change it.
I know that this is not an elegant option, but it works.
Let me know if it works for you that I can post my C source code here to
help you there.
Date: Wed, 10 Jun 2009 18:54:14 -0300
From: tizo <firstname.lastname@example.org>
Subject: Re: password change and ppolicy
Content-Type: text/plain; charset="utf-8"
On Tue, Jun 9, 2009 at 12:12 PM, tizo <email@example.com> wrote:
> Before starting this, I have been testing password changing with
> phpLDAPAdmin. The fact is that I could only change a user password with
> clear text. I guess that this behaviour happens because we have
> pwdCheckQulity setting in 2 in our default password policy. So, when the
> client (phpLDAPAdmin) tries to modify the password enconding it, the
> (OpenLDAP) cannot check the min length of the password, as it is encoded,
> and then fails. I am guessing too, that phpLDAPAdmin is performing a
> modify operation to change the password, as it is stored in clear text. On
> the other hand, I could change passwords with ldappasswd withouth problem,
> and they are stored with SSHA. I know that this command uses RFC 3062.