2013/4/10 D C <dc12078@gmail.com>After nearly two weeks of going nuts trying to setup a password policy, I finally found part of the documentation that I was missing. ÂApparently "ppolicy" does not actualy enforce the policy you create. ÂIf I'm understanding the documentation correctly, it really only provides more of a transport to something else which can do it.
No, ppolicy overlay manages a lot of things, like password history, password min size, password expiration, etc.
ÂIn particular the attribute pwdCheckModule, needs to point to a module which can enforce the policy. ÂHowever no module seems to be provided.What modules are other people using? ÂI stumbled around and found password_check.so, which I am trying to setup now with partial success.
This module adds some additional checks to the standard ppolicy overlay, like lower and upper cases characters.
ÂAnyone else have something better? ÂOne thing I need to do which I don't think this will help with, is storing the last x passwords.
Just use the standard ppolicy overlay and set pwdInHistory attribute value.
ClÃment.Thanks,Dan