[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OLC ppolicy



Am Wed, 19 Aug 2015 13:07:11 -0700
schrieb Jeremy Trammell - DLA <jtrammell@deeplearninganalytics.com>:

> Greetings,
> 
> I'm trying to set up a very simple LDAP server using OpenLDAP (via
> OLC) and it seems hopeless.  The sticking point is ppolicy.  I have
> followed several online guides 
> (http://www.ryanfrantz.com/posts/openldap-implementing-the-password-policy-overlay/, 
> https://www.oostergo.net/node/85, to name a few), all of which seem
> to essentially detail the same procedure, and have met with no
> success. Whilst following those instructions, I receive no error
> messages.  All commands complete successfully and do not indicate
> failures of any kind.  Looking at the cn=config and target DITs, all
> data seems to have been imported as expected.  Despite that fact,
> passwd follows a "mystery policy" which bears no resemblance to the
> policy that I have specified, and ldappasswd follows "no policy at
> all you can do whatever you want". Is there some way for me to
> empirically determine what these commands are doing, and why my
> policy does nothing?  Thanks in advance...
> 
> cn=module{0},cn=config
> > objectClass: olcModuleList
> > cn: module{0}
> > olcModuleLoad: {0}ppolicy.la
> > olcModuleLoad: {1}back_hdb
> > olcModuleLoad: {2}ppolicy
> > olcModulePath: /usr/lib/ldap

The module names are not correct.
Hint: check /usr/lib/ldap for correct module names.

-Dieter

-- 
Dieter Klünter | Systemberatung
http://sys4.de
GPG Key ID: E9ED159B
53°37'09,95"N
10°08'02,42"E