[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: openldap pwdReset

To: "Allgood, John" <jallgood@ohl.com>
Subject: Re: openldap pwdReset
From: SATOH Fumiyasu <fumiyas@osstech.jp>
Date: Thu, 24 Jun 2010 09:23:14 +0900
Cc: "'openldap-technical@openldap.org'" <openldap-technical@openldap.org>
In-reply-to: <DF1F44E4E77287409E73C3210D93934811CBC31875@NOC-ML-100.ohlogistics.com>
Organization: OSS Technology, Inc. / Samba-JP / LDAP-JP / Apache-JP
References: <DF1F44E4E77287409E73C3210D93934811CBC31875@NOC-ML-100.ohlogistics.com>
User-agent: Wanderlust/2.14.0 (Africa) XEmacs/21.4 (Instant Classic)

Hi,

At Wed, 23 Jun 2010 08:39:03 -0500,
Allgood, John wrote:
> I have a question for you all. I am using openldap 2.4.31 on Centos 5.5 and using the ppolicy overlay. I have also compiled the smbk5 module to update the samba attr when the user password is updated. My problem is to change the password and have the samba password update I have to use ldappasswrd which works great. If I force a pwdReset and login via gdm the password program take  over and sets the posix password but this does not change the samba side nor does it adhere to the ppolicy. I am thinking this may something related to /etc/pamd/system-auth file but not sure. Any feedback would be appreciated.

If you are using PADL pam_ldap.so (included in nss_ldap package),
you must set "pam_password exop" in your /etc/ldap.conf.

-- 
-- Name: SATOH Fumiyasu (fumiyas @ osstech co jp)
-- Business Home: http://www.OSSTech.co.jp/
-- Personal Home: http://www.SFO.jp/blog/

Follow-Ups:
- RE: openldap pwdReset
  - From: "Allgood, John" <jallgood@ohl.com>

References:
- openldap pwdReset
  - From: "Allgood, John" <jallgood@ohl.com>

Prev by Date: Re: Copying trees from one consumer to another
Next by Date: Re-investigating ppolicy + chain issues on a consumer: chain configuration
Index(es):
- Chronological
- Thread