Ross Johnson wrote:
I have FDS 1.1.1 running with password policy and syntax checking working for user passwords via the console, but I haven't been able to get ldappasswd (from mozldap-tools package) to pay attention to those password constraints that I know work via the console. That is, ldappasswd succeeds even when given passwords that fail in the console. Is this what I should expect to see?
I've now learnt that FDS will accept a plaintext password in the LDIF from ldapmodify, which is policy checked (I had assumed only a hashed value could be provided - duh) so I can at least move on but I'm still puzzled by ldappasswd since that would be the most obvious choice for scripting password changes. It's possibly only the mozldap-tools version because I see that other implementations provide parameters to send either plaintext passwords or encrypted.

--
Ross Johnson
Unix Specialist, IT Infrastructure
Insolvency and Trustee Service Australia
Ph:  +61 2 6270 3483
Fax: +61 2 6270 3413

Important: This transmission is intended only for the use of the addressee and 
may contain confidential or legally privileged information. If you are not the 
intended recipient, you are notified that any use or dissemination of this 
communication is strictly prohibited. If you have received this transmission in 
error, please notify immediately by telephone and delete all copies of this 
transmission, together with any attachments.

--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Reply via email to