[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Solairs PAM Password Policy

To: farhan ahmed <farhhanahmed@hotmail.com>
Subject: Re: Solairs PAM Password Policy
From: Buchan Milne <bgmilne@staff.telkomsa.net>
Date: Wed, 23 Apr 2008 06:44:07 +0200
Cc: openldap-technical@openldap.org
Content-disposition: inline
In-reply-to: <BLU125-W368BD4B5BDE03248824ACFD0E30@phx.gbl>
References: <BLU125-W16D63459BC2FF39D84FF5BD0E00@phx.gbl> <200804221548.44986.bgmilne@staff.telkomsa.net> <BLU125-W368BD4B5BDE03248824ACFD0E30@phx.gbl>
User-agent: KMail/1.9.9

On Wednesday 23 April 2008 02:51:22 farhan ahmed wrote:
> Hi Buchan,

Please stay on-list.

> Thanks for reply but I am using OpenLdap server rather than Directory
> Server. Any other suggestion ?

The point is, that even with Sun's on directory server, the Solaris pam_ldap 
does not support password policies correctly. As far as I understand, the 
OpenLDAP ppolicy feature (with a draft standard) is compatible with the 
relatively undocumented Netscape LDAP server feature. In the forum post I 
gave, you'll note that HP-UX's pam_ldap supports the password policies 
correctly ...

So, this is a limitation on the Solaris side, there isn't much you can do 
unless you can run PADLs pam_ldap.

Regards,
Buchan

References:
- Solairs PAM Password Policy
  - From: farhan ahmed <farhhanahmed@hotmail.com>
- Re: Solairs PAM Password Policy
  - From: Buchan Milne <bgmilne@staff.telkomsa.net>

Prev by Date: why ldap_simple_bind() can't return immediately?
Next by Date: ldap_simple_bind() can't return immediately?
Index(es):
- Chronological
- Thread