Re: problem with security ppolicy

Evgeniy <[email protected]>
Newsgroups gmane.network.openldap.general
Message-ID <[email protected]>
  
  Its solving problem with security policy.         Thank you.

  Please, update documentation for security policy in OpenLdap.

Now: 
 "This attribute controls the action taken when an account has had more consecutive failed bind attempts with invalid passwords than is defined by pwdMaxFailure."
But   pwdLockout : TRUE enables   other security blocks too, and this blocks don't work without it.



08.10.09, 11:21, "Clément OUDOT" <[email protected]>:

> Le 7 octobre 2009 19:51, Evgeniy  a écrit :
> >
> > On releases up to 2.4.16  (2.3.x  too)  works  next config :
> >
> > overlay ppolicy
> > ppolicy_default "cn=CompanyAccountPolicy,ou=CompanyPolicies,dc=Company,dc=com"
> > ppolicy_hash_cleartext
> > ppolicy_use_lockout
> >
> >   On 2.4.18,  2.4.19  its don't  work.
> >
> >>>you have to apply a password policy to your  > entry, either by setting a default password policy in ppolicy overlay  > configuration
> >
> >  How I can do it ?
> The configuration looks correct. The pwdAccountLockedTime attribute
> should deactivate an entry in the directory. Be sure to have a TRUE
> value in pwdLockout attribute of
> cn=CompanyAccountPolicy,ou=CompanyPolicies,dc=Company,dc=com
> Clément.

-- 
---______________________________________________---
  С уважением, Евгений
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.