[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: PAM authentication and PPolicy issues

To: Francesco Belli <Francesco.Belli@vegaspace.com>
Subject: Re: PAM authentication and PPolicy issues
From: Clément OUDOT <clem.oudot@gmail.com>
Date: Wed, 20 Jun 2012 09:46:37 +0200
Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=d8e4QnXtv+cNEwCUle47SOxdakaC8QAW3rLjXbQDUX8=; b=i6MDkKIodZJDeo8qZpiFjBE5tNTS3CJ0ZTJ9RP5GX1APqBZEoC/hncaI2cpZT7FAOD LBv0bgjoX2xdj+LrMmPcxQ3189QyVJsH/sp5b60LAbSVhT27tDarFa7wYqrx1eSj8KTj 0tmXvoeZfSFoju3a8gCebz1KFURLQoDgO/gvAp26BdNvbh/g40i7quT4PYBEXgPhSzwf yiAIjpQl9kOrOlmmPoD15+9vmWSF98DESE868/PaKRD1fgTh/D/hWU8kn4q6CBWwNYV0 dFLEJHEWo8sUhKBKoHDJBS0JvWVaWPaLELqfrdXr9xKCcor1bNAiJr1aLa3QIN465iUv 9ffw==
In-reply-to: <FC230C66F47C8543B026F265E1E91D5823703AA7@GEDASPW05.a.space.corp>
References: <FC230C66F47C8543B026F265E1E91D5823703AA7@GEDASPW05.a.space.corp>

2012/6/19 Francesco Belli <Francesco.Belli@vegaspace.com>:
> Hi Everybody,
>
> I'm have some RHEL6 machines that use an LDAP server to authenticate. I need to introduce in the server some checks on passwords using PPolicy. PPolicy works fine, the problem is that to use pwdCheckQuality and pwdInHistory I need to save passwords in clear text in the LDAP server. I did a search to find out if there is a way to let PAM to use clear text password to authenticate but it seems that it sends SHA hashes, so authentication fails. Do you have any suggestion?

Do "man pam_ldap" and search for pam_password parameter.

Clément.

References:
- PAM authentication and PPolicy issues
  - From: Francesco Belli <Francesco.Belli@vegaspace.com>

Prev by Date: authentication problem
Next by Date: Re: authentication problem
Index(es):
- Chronological
- Thread