Re: What can I use for pwdCheckModule?

To: ClÃment OUDOT <clem.oudot@gmail.com>

Subject: Re: What can I use for pwdCheckModule?

From: D C <dc12078@gmail.com>

Date: Wed, 10 Apr 2013 09:30:13 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=jCBm1OsC0vTwfLl98qsjmtdVBGTuYfbYo2NA5nbicsE=; b=AGJmy29KgLjpdlowQ8b0XCTZCQYM+iRIY1pR5RZZrPpcVT+TTLB7xfMQfzCLGmDxMS BR5FmZm+JYXBnpw309NsMViAylgET+JMc8bl3WqOLMlJSvnxi76zPgE85rIUlxjt0GTT 6xaTb/847PkEun5/zIalOxtnuqIox/szFkjPZhrxG8FyWFtYg4KB2+nUG4WGlwY6mE6Y /KULg2mf8N0SQiwDQVaO1NUbLf/CZZFuJj6tQzGMJ+KTAUX9o5P3CN+XdqMymV1/FgAB DwHDORIrnl0HwA8KWPRsyHQZ62WA5jBUC59iF+n4PKvD5XE4EQcot0zT3DB9TvdSmdr2 d0KA==

In-reply-to: <CAK_oV49cOP1ypQukegoEaFkWTTGENEXicNfjPJR0JgEzoathuA@mail.gmail.com>

References: <CACErCdWjZ8xHcgLp3opA-p+KcNds68jDHpQ7uG84_gGjkODJpQ@mail.gmail.com> <CAK_oV4916Q40qmiaty5_yEQB3SmO_=zyQmAKKgubvehRYKdkYg@mail.gmail.com> <CACErCdUkQbU3+13nBM5yV1z9QSwB5YYLSF_-7YUpsM_=-iO46g@mail.gmail.com> <CAK_oV49cOP1ypQukegoEaFkWTTGENEXicNfjPJR0JgEzoathuA@mail.gmail.com>

My mistake. ÂI've had password policies on my mind so much lately, that I have been mostly focusing on the password strength portion of it, which I realize is not part of ppolicy itself.

I'm going through each attribute right now to do a thorough test of what is working and / or not working.

Server is openldap 2.4.23

Thanks,

Dan

On Wed, Apr 10, 2013 at 9:14 AM, ClÃment OUDOT <clem.oudot@gmail.com> wrote:

2013/4/10 D C <dc12078@gmail.com>

I
have tried using ppolicy, but it is not really doing anything.
I can confirm that my policy is being used by flipping the "pwdSafeModify" attribute.

When set to true, users cannot change their password and they get a message saying that they need to send both the old and new password together.

Other than that, none of the other fields seem to have any effect.

Do you have a working example of ppolicy?

Are you sure your are not using the root account (rootdn) to change the password?

What version of OpenLDAP are you using?

ClÃment.

Follow-Ups:

Re: What can I use for pwdCheckModule?
- From: Quanah Gibson-Mount <quanah@zimbra.com>