Pierangelo Masarati wrote:
So it clearly shows no Overlay module is loaded into ldap.
well, it may also show that the identity you use doesn't have disclose
access below the cn=monitor tree, or you compiled OpenLDAP software
without the monitor overlay (is it yet possible?) or you didn't enable
it by adding the "database monitor" directive to slapd.conf.
But I have the following entry in slapd.conf.
# slapo-ppolicy has extra schema requirements
include /usr/local/etc/openldap/schema/ppolicy.schema
overlay ppolicy
ppolicy_default "cn=Default Policy,ou=Policies,dc=mydoamain,dc=com"
If you do, and slapd starts without complaining too much, then it's
loaded.
p.
I added "database monitor" directive to slapd.conf.
Then the result are follows:
[EMAIL PROTECTED] openldap]# ldapsearch -x -H ldap://:6666 -b
cn=Overlays,cn=Monitor
# extended LDIF
#
# LDAPv3
# base <cn=Overlays,cn=Monitor> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# Overlays, Monitor
dn: cn=Overlays,cn=Monitor
objectClass: monitorContainer
cn: Overlays
description: This subsystem contains information about available overlays.
# Overlay 0, Overlays, Monitor
dn: cn=Overlay 0,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 0
# Overlay 1, Overlays, Monitor
dn: cn=Overlay 1,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 1
# Overlay 2, Overlays, Monitor
dn: cn=Overlay 2,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 2
# Overlay 3, Overlays, Monitor
dn: cn=Overlay 3,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 3
# Overlay 4, Overlays, Monitor
dn: cn=Overlay 4,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 4
# Overlay 5, Overlays, Monitor
dn: cn=Overlay 5,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 5
# Overlay 6, Overlays, Monitor
dn: cn=Overlay 6,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 6
# Overlay 7, Overlays, Monitor
dn: cn=Overlay 7,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 7
# Overlay 8, Overlays, Monitor
dn: cn=Overlay 8,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 8
# Overlay 9, Overlays, Monitor
dn: cn=Overlay 9,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 9
# Overlay 10, Overlays, Monitor
dn: cn=Overlay 10,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 10
# Overlay 11, Overlays, Monitor
dn: cn=Overlay 11,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 11
# Overlay 12, Overlays, Monitor
dn: cn=Overlay 12,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 12
# Overlay 13, Overlays, Monitor
dn: cn=Overlay 13,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 13
# Overlay 14, Overlays, Monitor
dn: cn=Overlay 14,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 14
# Overlay 15, Overlays, Monitor
dn: cn=Overlay 15,cn=Overlays,cn=Monitor
objectClass: monitoredObject
cn: Overlay 15
# search result
search: 2
result: 0 Success
&
[EMAIL PROTECTED] openldap]# ldapsearch -x -H ldap://:6666 -b
cn=Databases,cn=Monitor '(monitorOverlay=ppolicy)' '*' '+'
# extended LDIF
#
# LDAPv3
# base <cn=Databases,cn=Monitor> with scope subtree
# filter: (monitorOverlay=ppolicy)
# requesting: * +
#
# search result
search: 2
result: 0 Success
Why there is a difference between your output and mine.
Can I assume that ppolicy overlay is loaded fine.
But still if I put the line moduleload ppolicy.la in the slapd.conf
it says file not found and stoping slapd.
My compile options are below:
configure
--enable-syslog \
--enable-crypt \
--enable-modules \
--enable-rewrite \
--enable-wrapers \
--enable-backends \
--enable-overlays \
--enable-slurpd
Also I put a password length or 6 characters
Still I am able to change password to 3 charactors.
Thanks for your help again.
Sandeep
Ing. Pierangelo Masarati
Responsabile Open Solution
SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
------------------------------------------
Office: +39.02.23998309
Mobile: +39.333.4963172
Email: [EMAIL PROTECTED]
------------------------------------------
