LDAP Folks,

   I recently reported a problem where I could change a password in
   Oracle's OID using a generic LDAP client written in Java, but
   couldn't do the same with Net::LDAP.

   I was able to get the OID admin to turn on logging and give me
   access to the logs.  That solved the mystery.

   Oracle was enforcing its password policy where the password must
   contain at least 1 digit.  But it was not enforcing this policy
   when using the Java client.  That's because (I'm reasonably sure)
   the Java client was sending the password already hashed, so there
   was no way for OID to apply its password quality rules.  But when I
   submitted a new password via my Perl script it was in clear text.

                                                      ...BC

-- 
+----------------------------[ [EMAIL PROTECTED] ]---+
| Bill Costa                                          |
| 54 College Road -- CIS Ctr   PHONE: +1-603-862-3056 |   No good deed...
| University of New Hampshire    FAX: +1-603-862-4778 |    goes unpunished.
| Durham, NH  03824-3591  USA                         |
|                                                     |
+-----------------[ http://pubpages.unh.edu/~wfc/ ]---+

Reply via email to