Hi,

I got the answer to this problem. If anyone else gets the same issue I think
you should know that it is a setting in the file:

/usr/local/openldap/etc/openldap/ldap.conf

The normal way to do this on an RedHat machine is via the use of authconfig
command but this command updates (among other files) the /etc/ldap.conf and
/etc/openldap/ldap.conf files. The trouble is that your distribution have
the files saved in /usr/local/openldap/etc/openldap/ folder so the change
authconfig is doing does not really make a difference :)

The password policy started to be enforced to SSH and OpenVPN as soon as I
added the following to the file /usr/local/openldap/etc/openldap/ldap.conf:

pam_password exop
pam_lookup_policy yes

Hope this will save some poor soul a few hours :)

Regards Evo. 


On 12/01/2010 12:40, "Evo" <[email protected]> wrote:

> Hi,
> 
> I am having trouble with implementing ppolicy. It works when using the LDAP
> client tools but it does not enforce it to users using ssh to authenticate to
> the server. I am also using OpenLDAP to authenticate OpenVPN users and the
> openldap password policy is not enforced to as well. Am I missing something? I
> am using centos and have followed this guide
> http://directory.fedoraproject.org/wiki/Howto:PAM to set the authentication of
> users for services like SSH and OpenVPN.
> 
> Evo. 
> 
> _______________________________________________
> ltb-users mailing list
> [email protected]
> http://lists.ltb-project.org/listinfo/ltb-users

_______________________________________________
ltb-users mailing list
[email protected]
http://lists.ltb-project.org/listinfo/ltb-users

Reply via email to