Databases
StackOverflow2013
Postsdbo
POOpanLdap password policies
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POOpanLdap password policies
    primarykey
    data
    text
    <p>I have installed the openldap version 2.4.23 on windows xp and using the apache DS as a client.I can authenticate users on a client server I set up for testing. </p> <p>My next step is to turn on a password policy. This is where things have gotten a bit hazy for me and I'm hoping someone can help me out.</p> <p>i added a password policy also by using the followin command</p> <p>ldapadd -x -c -f -D "cn=Manager,dc=maxcrc,dc=com" -w secret</p> <p>but after addition of password policies how do i make them in effect.</p> <p>The openldap documentation says the password policy module should be configured with the DN of the default policy.</p> <p>i added the following lines in slapd.conf file </p> <pre><code># invokes password policies for this DIT only overlay ppolicy # Default ppolicy ppolicy_default "cn=passwordDefault,ou=policies,dc=maxcrc,dc=com" </code></pre> <p>but somehow it is not getting loaded , i have already spent more a lot of time on this, but i am not getting the proper guide for the same.</p> <p>Can anyone shed some light on this in plain, layman's terms?</p> <p>Thanks in advance.</p> <p>My ldif file is as follows.</p> <pre><code>dn: cn=passwordDefault,ou=policies,dc=localdomain,dc=com objectClass: pwdPolicy objectClass: person objectClass: top cn: passwordDefault sn: passwordDefault pwdAttribute: userPassword pwdCheckQuality: 1 pwdMinAge: 1 pwdMaxAge: 90 pwdMinLength: 6 pwdInHistory: 4 pwdMaxFailure: 3 pwdFailureCountInterval: 0 pwdLockout: TRUE pwdLockoutDuration: 0 pwdAllowUserChange: TRUE pwdExpireWarning: 604800 pwdGraceAuthNLimit: 3 pwdMustChange: TRUE pwdSafeModify: TRUE </code></pre> <p>after adding this policy and restarting the server i tried changing the password of existing as well as newly added users. The server allows me to change the password to a string with length less than 6 whereas i have mentioned pwdMinLength: 6 in ldif.</p> <p>as well as i tried changing the password more than once , but it allows me to change the password to recently used password, whereas the pwdInHistory: 4 in ldif.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PTQuestion
    1. USDeepak Patil
    1. USDeepak Patil
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POOpanLdap password policies
      1. USammy
      1. VTFavorite
    1. COYour `ldapadd` command does not look right, `-f` takes a filename (usually of an LDIF file).
      singulars
      1. POOpanLdap password policies
      1. USmr.spuratic
    2. COIt would also help to show us what's in the LDIF file, and what evidence you have that the policy isn't in effect.
      singulars
      1. POOpanLdap password policies
      1. USuser207421
    3. CO@mr.spuratic : i just missed the filename here , the complete ldapadd command is ldapadd -c -f passwordpolicy.ldif -D "cn=Manager,dc=maxcrc,dc=com" -x -w secret
      singulars
      1. POOpanLdap password policies
      1. USDeepak Patil
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload