Re: [SSSD-users] Need help configuring fine grained password policy

2013-09-13 Thread Bright, Daniel
, 2013 7:18 AM To: sssd-users@lists.fedorahosted.org Subject: Re: [SSSD-users] Need help configuring fine grained password policy On Thu, Sep 12, 2013 at 03:21:51PM -0400, Dmitri Pal wrote: On 09/12/2013 03:14 PM, Bright, Daniel wrote: Jakub, Thanks for the response, I figured out why

Re: [SSSD-users] Need help configuring fine grained password policy

2013-09-13 Thread Jakub Hrozek
On Fri, Sep 13, 2013 at 02:03:07PM +, Bright, Daniel wrote: I did not see any extended error messages in the debug logs, actually I am using Oracle Enterprise Linux 6 (OEL6) so the version of sssd I am on is 1.9.2-82.7, it looks like the fix that you spoke about earlier is in 1.10.1x and

[SSSD-users] Need help configuring fine grained password policy

2013-09-12 Thread Bright, Daniel
Jakub, I took your advice and turned debugging to level 9, this is what I am seeing in the logs: === [r...@some.server.com sssd]# tail -f sssd_LDAP.log | grep sdap_exop (Thu Sep 12 09:44:57 2013)

Re: [SSSD-users] Need help configuring fine grained password policy

2013-09-12 Thread Bright, Daniel
Jakub, Thanks for the response, I figured out why I was getting the constraint violation, in my case it was because I have the passwordminage set for my policy, when I changed the user attribute passwordallowchangetime to the current date then I was able to perform the passwd operation. So at

Re: [SSSD-users] Need help configuring fine grained password policy

2013-09-12 Thread Dmitri Pal
On 09/12/2013 10:02 AM, Bright, Daniel wrote: Jakub, I took your advice and turned debugging to level 9, this is what I am seeing in the logs: === [r...@some.server.com sssd]# tail -f

Re: [SSSD-users] Need help configuring fine grained password policy enforcement on RHEL6 using sssd

2013-09-11 Thread Jakub Hrozek
On Wed, Sep 11, 2013 at 06:25:25PM +, Bright, Daniel wrote: I was told by the good folks at the 389-users mailing list to instead redirect my question to the sssd-users list so here goes, thanks in advance! All, I am in the process of moving away from pam_ldap and on to pam_sss. The

Re: [SSSD-users] Need help configuring fine grained password policy enforcement on RHEL6 using sssd

2013-09-11 Thread Dmitri Pal
On 09/11/2013 04:06 PM, Bright, Daniel wrote: Jakub, Thanks for the quick response, to answer your question I am using the built-in password policy features of 389-ds that allows us to use these features: Maximum Number of Failures Password Change After Reset User-Defined