[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
password policy
- To: openldap-technical@openldap.org
- Subject: password policy
- From: Christian Bösch <boesch@fhv.at>
- Date: Wed, 15 Feb 2012 10:50:59 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=fhv.at; s=default; t=1329299537; bh=x45VuZOUKsWRgWkYuC/5EPxTdukSBzUlXhpG0UAvudE=; h=From:Content-Type:Subject:Date:Message-Id:To:Mime-Version; b=gLAais49cd8LeRPJ6Dy2kCxeYfrdY99VRlgL7QtF2J37rwm/deH6Nt0hX3BGt+d4R XavuOj+9O04AAgxnU++rPc9iR2R5jdZoR+XRs+0p1k0PD2SB60vJ205lKwBucwDBpD yl+R0aqzJpCWcvKGEVLy/gWvmoPVXfAg9Y6hPOPg=
hi,
i want to force a password change for a user. therefor i set pwdreset: true
but to change the password, bind attempts are still allowed.
i thinks thats the reason why a user with pwdreset=true still can login to
an apache webresource which is protected with ldap authentication.
is there a way to prohibit that?
i want the user to only allow the password change.
/thanks,chris
Attachment:
smime.p7s
Description: S/MIME cryptographic signature