[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Forbidden account password reuse of the last 5 password

To: openldap-technical@openldap.org
Subject: Re: Forbidden account password reuse of the last 5 password
From: Derek Zhou <derek@shannon-data.com>
Date: Sat, 16 Feb 2019 20:33:47 +0800
In-reply-to: <fd185822-e9de-d86b-8db3-6c9dd716c706@symas.com>
References: <012201d4c432$c27c4540$4774cfc0$@thundersoft.com> <87h8d6q1lj.fsf@mail.shannon-data.com> <31cba83e-e98d-6043-6430-62f5abd23732@stroeder.com> <87ftspq0d5.fsf@mail.shannon-data.com> <fd185822-e9de-d86b-8db3-6c9dd716c706@symas.com>
User-agent: K-9 Mail for Android


On February 15, 2019 10:50:36 PM GMT+08:00, Howard Chu <hyc@symas.com> wrote:
>slapd does not store plaintext passwords either.
>
sorry for spreading mis infomation based on my imagination. With ppolicy, can a user change his password after his password expired? I'd think no, because you have to bind before you modify the userpassword field, and if the password expired I'd think bind will fail. OTOH, kerberos does allow user to change password after expiration. this save me a lot of work, because my users always forgot to change pw in time.

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

Follow-Ups:
- Re: Forbidden account password reuse of the last 5 password
  - From: Michael Ströder <michael@stroeder.com>

References:
- Forbidden account password reuse of the last 5 password
  - From: "Tian Zhiying" <tianzy1225@thundersoft.com>
- Re: Forbidden account password reuse of the last 5 password
  - From: Derek Zhou <derek@shannon-data.com>
- Re: Forbidden account password reuse of the last 5 password
  - From: Michael Ströder <michael@stroeder.com>
- Re: Forbidden account password reuse of the last 5 password
  - From: Derek Zhou <derek@shannon-data.com>
- Re: Forbidden account password reuse of the last 5 password
  - From: Howard Chu <hyc@symas.com>

Prev by Date: RE: help needed for further investigation
Next by Date: Re: Forbidden account password reuse of the last 5 password
Index(es):
- Chronological
- Thread