[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ppolicy and ACLs of pwdAccountLockedTime?

To: Jiri Bohac <jbohac@jikos.cz>
Subject: Re: ppolicy and ACLs of pwdAccountLockedTime?
From: Michael Ströder <michael@stroeder.com>
Date: Tue, 11 Aug 2009 20:28:13 +0200
Cc: openldap-technical@openldap.org
In-reply-to: <20090808010151.GA19475@twin.jikos.cz>
References: <20090808010151.GA19475@twin.jikos.cz>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.22) Gecko/20090606 SeaMonkey/1.1.17

Jiri Bohac wrote:
> Hi,
> 
> I am having troubles making the ppolicy overlay to prevent password
> guessing attacks with pwdLockout with slapd-2.4.11-1 in Debian Lenny.

Please try again with a more recent release. There were fixes to slapo-ppolicy
after release 2.4.11. In particular (from CHANGES):

OpenLDAP 2.4.17 Release (2009/07/13)
[..]
        Fixed slapo-ppolicy to honor pwdLockout (ITS#6168)
        Fixed slapo-ppolicy to return check modules error message (ITS#6082)
[..others...]

You can reach current CHANGES from here:

  http://www.openldap.org/devel/cvsweb.cgi/Attic/CHANGES

Ciao, Michael.

References:
- ppolicy and ACLs of pwdAccountLockedTime?
  - From: Jiri Bohac <jbohac@jikos.cz>

Prev by Date: Re: LDAP stopping without apparent reason
Next by Date: Re: OpenLDAP + Kerberos on FreeBSD 7.2, close to working but not quite
Index(es):
- Chronological
- Thread