[Date Prev][Date Next] [Chronological] [Thread] [Top]

RHEL7 OpenLDAP server is not enforcing password expirations

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Subject: RHEL7 OpenLDAP server is not enforcing password expirations
From: "Real, Elizabeth (392K)" <Elizabeth.Real@jpl.nasa.gov>
Date: Thu, 27 Aug 2015 22:56:37 +0000
Accept-language: en-US
Content-language: en-US
Thread-index: AQHQ4Rugrn0odDnazE6aH4nbA0R4rw==
Thread-topic: RHEL7 OpenLDAP server is not enforcing password expirations

Hello,

I’ve done a lot or research and re-read the OpenLDAP configuration guides but I cannot get my OpenLDAP 2.39 server to not allow users with expired passwords to login to ldap enabled clients. What directive in the /etc/pam.d/ files controls the users password expiration attribute? pam_unix or pam_ldap?

Setup:

Server: RHEL7 OS

Software: OpenLdap 2.4.39 server using slapd service

Client: RHEL7 OS

Software: enabled Ldap via authconfig, using sssd service

Thank you,

Liz

Follow-Ups:
- Re: RHEL7 OpenLDAP server is not enforcing password expirations
  - From: Abdelhamid Meddeb <abdelhamid@meddeb.net>

Prev by Date: Re: disable simple paged results control support?!
Next by Date: Send Success with first found entry
Index(es):
- Chronological
- Thread