[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ppolicy not verifying password length (not active !!)



I Also stuck in this issue. My password policy was not working on openldap 2.4.23 so someone suggested me to upgrade as this is the older version. So i upgraded it to 2.4.39 but struggling to get SSL work for openssl.

really shock to see that there is no proper document for the installation and configuration. 2.4.39 have to be configured from source and not rpm so facing hell lot of issue.
 
Regards
Sam


On Wednesday, 5 March 2014 8:31 PM, Michael Ströder <michael@stroeder.com> wrote:
On Wed, 5 Mar 2014 11:33:51 +0000 Rodrigo Coutinho <Rodrigo.Coutinho@ifap.pt>
wrote
> Ok, thank you for the information, but I must confess that I am a bit
> shocked, as that implies I can have a directory full of non compliant
> passwords. 
>
> So, that begs the question: How do we prevent this ?  What is the
> normal/standard way ? 

Mantra to be repeated thousands of times:

Never use rootdn to bind.


> Should one create another user with administrative privileges and use it to
> change passwords when needed ?


Yes.

Ciao, Michael.