Re: [389-users] ldappasswd

2012-10-12 Thread Morris, Patrick
-Original Message- From: 389-users-boun...@lists.fedoraproject.org [mailto:389-users- boun...@lists.fedoraproject.org] On Behalf Of upen Sent: Friday, October 12, 2012 1:12 PM To: 389-users@lists.fedoraproject.org Subject: [389-users] ldappasswd Hi, On my system there are two

Re: [389-users] Question about expired/expiring passwords

2012-08-09 Thread Morris, Patrick
It's up to the client to support warnings about password expiration (that true in general, not just where LDAP is involved). I have no idea how, or even if, WS_FTP, Filezilla or pGina support that, but I suspect they don't. In my environment I've written scripts that will send emails when a

Re: [389-users] automount via LDAP/NFS

2010-11-19 Thread Morris, Patrick
On 11/18/2010 1:16 PM, John Mancuso wrote: /home/jmancuso just disappeared after restarting autofs. no idea why On Thu, Nov 18, 2010 at 4:03 PM, John Mancusojkmanc...@gmail.com wrote: Oh I see. /home/jmancuso is mounting properly. good. wonder why it is trying to chdir to

Re: [389-users] SSH AllowGroups and LDAP authentication

2010-11-17 Thread Morris, Patrick
Again, try listing them all on one line. SSH is probably only looking at one of them. From man sshd_config: *AllowGroups* This keyword can be followed by a list of group name patterns, separated by spaces. On 11/17/2010 12:08 PM, Allan Hougham wrote: Hi Patrick, This is my sshd_conf, and

Re: [389-users] SSH AllowGroups and LDAP authentication

2010-11-09 Thread Morris, Patrick
On 11/9/2010 5:36 AM, Allan Hougham wrote: Hi Patrick, What does groups ahougham show on that box? Is that user in an allowed group? ahougham is a user in Search group I need anothe parameter or any adicional setting? do you have any tutorial with this configuration and what parameters I

Re: [389-users] SSH AllowGroups and LDAP authentication

2010-11-08 Thread Morris, Patrick
On 11/8/2010 8:56 AM, Allan Hougham wrote: I need help with this issue, I setting sshd_config with AllowGroups but I can´t authenticate with LDAP, the groups are settings up, this is my configuration: Do you have any tutorial or guide for setting ssh authentication groups with LDAP? This is

Re: [389-users] openldap ldapsearch command

2010-10-26 Thread Morris, Patrick
On 10/26/2010 9:14 AM, Frederic Hornain wrote: Rich, ldapsearch -v -h 192.168.122.142 -s sub -U uid:fhornain,ou=People,dc=example,dc=com -b dc=example,dc=com -Y DIGEST-MD5 ldap_initialize( ldap://192.168.122.142 http://192.168.122.142 ) SASL/DIGEST-MD5 authentication started Please enter

Re: [389-users] access control

2010-10-25 Thread Morris, Patrick
http://directory.fedoraproject.org/wiki/Howto:AccessControl On 10/23/2010 6:38 PM, Mike Li wrote: I am using the latest 389 DS (1.1), on Linux. Searching the entries works but cannot do add/modify, ldap_add_s() and ldap_modify_s() APIs return: Insufficient access. How do I give the write

Re: [389-users] shadowLast Change NOT updating was Re: ldappasswd and shadowLastChange attribute

2010-09-29 Thread Morris, Patrick
So... The attribute is there, it's writeable, and it's not being updated when a user changes their password? That really doen't leave much other than PAM configuration. Have you looked at the server access logs to see if an attempt is being made to change it, and if so, what the result is of

Re: [389-users] how to get password expiration warnings and password policy

2010-09-24 Thread Morris, Patrick
of LDAP v3 I think). I am using this with great success in java but not sure how much is implemented in PHP. Maybe someone on this list or a php list may know better. 2010/9/24 Morris, Patrick patrick.mor...@hp.com mailto:patrick.mor...@hp.com On 9/23/2010 8:13 PM, Ondrej Ivanič

Re: [389-users] Enforcement of password policy dependend on presence of {password encryption type}?

2010-09-22 Thread Morris, Patrick
On 9/22/2010 10:32 AM, Gerrard Geldenhuis wrote: Hi Problem Statement: If I have the following ldif executed by Directory Manager: dn: uid=jsmith,ou=People,dc=mycompany changetype: modify replace: userPassword userPassword: 5A80f5A80FFE3A51BA71A0014F88F0204995334D9849DC02E1A7E06dd171

Re: [389-users] Password policies and account policies with PAM

2010-03-11 Thread Morris, Patrick
Ivan Ferreira wrote: Hi everybody. I’m testing the password policies and account lockout policies on Directory Server 1.2.2. For account lockout policies, it seems that it does not works with pam authentication, for example for services like login or ssh. If I set the

Re: [389-users] modifying the server of the sync Agreement

2010-03-09 Thread Morris, Patrick
jean-Noël Chardron wrote: hello, In my company, the AD server that is sync with a 389 directory server will be changed by a new one (because the actual AD is used and old and not eternal) In the documentation http://www.redhat.com/docs/manuals/dir-server/8.1/admin/Windows_Sync.html I

Re: [389-users] RH 3-5 systems hanging requiring autofs restart to fix issue

2010-02-23 Thread Morris, Patrick
Charles Gilbert wrote: Hi everyone, I am experiencing an issue with my systems in that autofs, or even nscd or crond hangs after our RH 3, 4, and 5 machines are being used for a while. This issue is causing concern that our LDAP install is not stable obviously, and has sent me on a

Re: [389-users] Fedora Management Console simply hangs when trying to create user

2010-02-01 Thread Morris, Patrick
Sean Carolan wrote: Anyone have a suggestion how to fix this? 389-console -D 9 -f console.log - take a look at the console log Thanks for your reply, Rich. I tried this and simply got another console window, but no log entries. Is there a way to do this from the command line

Re: [389-users] error log showing Detected Disorderly Shutdown on startup

2010-01-23 Thread Morris, Patrick
Rankin, Kent wrote: Upon startup, this is occurring: [23/Jan/2010:12:31:42 -0500] - 389-Directory/1.2.4 B2009.307.1545 starting up [23/Jan/2010:12:31:42 -0500] - Detected Disorderly Shutdown last time Directory Server was running, recovering database. Any ideas? How was the the LDAP