[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ppolicy issues

To: Michael Ströder <michael@stroeder.com>
Subject: Re: ppolicy issues
From: Andrew Findlay <andrew.findlay@skills-1st.co.uk>
Date: Tue, 8 Aug 2017 20:24:54 +0100
Cc: r0m5 <r0m5@r0m5.eu>, openldap-technical@openldap.org
Content-disposition: inline
In-reply-to: <78eb071c-64d8-9ad0-1fb2-23765e4aab97@stroeder.com>
References: <95e031892a64f900ae7096b4a4c990c1@de-rasse.fr> <78eb071c-64d8-9ad0-1fb2-23765e4aab97@stroeder.com>
User-agent: Mutt/1.5.21 (2010-09-15)

On Tue, Aug 08, 2017 at 07:46:02PM +0200, Michael Ströder wrote:

> Yes, slapo-ppolicy config can be different per database.
> Also consider setting password-hash / password-crypt-salt-format per database.

Be aware that you must put ppolicy entries (including default entries)
in the same database as the entries that they will govern. Thus you need
at least one policy entry in each backend DB.

See ITS#7262 for details:

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7262;selectid=7262

Andrew
-- 
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------

References:
- ppolicy issues
  - From: r0m5 <r0m5@r0m5.eu>
- Re: ppolicy issues
  - From: Michael Ströder <michael@stroeder.com>

Prev by Date: Re: SASL EXTERNAL binds and sasl-secprops minssf > 0
Next by Date: Re: SASL EXTERNAL binds and sasl-secprops minssf > 0
Index(es):
- Chronological
- Thread