[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: openldap 2.4.40 ppolicy module and shadowInactive equivalent

To: "Real, Elizabeth (392K)" <Elizabeth.Real@jpl.nasa.gov>, openldap-technical@openldap.org
Subject: Re: openldap 2.4.40 ppolicy module and shadowInactive equivalent
From: Quanah Gibson-Mount <quanah@symas.com>
Date: Mon, 24 Oct 2016 18:29:45 -0700
Content-disposition: inline
In-reply-to: <WM!2bb9e49f994736405f1f61fff9d0b37772a664ce153dae64c96e3db808740b64c3063c57534ec97995c793c54df52f53!@mailstronghold-2.zmailcloud.com>
References: <0C90A104-2EF4-4AA6-8748-05B07154A54D@jpl.nasa.gov> <WM!2bb9e49f994736405f1f61fff9d0b37772a664ce153dae64c96e3db808740b64c3063c57534ec97995c793c54df52f53!@mailstronghold-2.zmailcloud.com>

--On Monday, October 24, 2016 7:43 PM +0000 "Real, Elizabeth (392K)"<Elizabeth.Real@jpl.nasa.gov> wrote:

I setup a password policy overlay on my openldap 2.4.40 servers running
RHEL7. I need to enforce the following: disable accounts that have been
inactive for 180 days. In the past we were able to do this by simply
adding the shadowInactive attribute to each account: shadowInactive 180.
But with the new openldap, it appears there is no equivalent attribute??

OpenLDAP ppolicy has never supported that attribute, as far as I know. Ibelieve you are looking for the contrib nssov overlay, which does supportit.


Hope that helps!

Regards,
Quanah



--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>

Follow-Ups:
- Re: openldap 2.4.40 ppolicy module and shadowInactive equivalent
  - From: "Real, Elizabeth (392K)" <Elizabeth.Real@jpl.nasa.gov>

References:
- openldap 2.4.40 ppolicy module and shadowInactive equivalent
  - From: "Real, Elizabeth (392K)" <Elizabeth.Real@jpl.nasa.gov>

Prev by Date: Re: delta-synrepl consumer randomly delete objects
Next by Date: Proxy cache not work with <attribute not in schema>
Index(es):
- Chronological
- Thread