Re: OpenLDAP ppolicy and pam_ldap

View: New views
1 Messages — Rating Filter:   Alert me  

Re: OpenLDAP ppolicy and pam_ldap

by vsp_123 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

>>> "Prakash Velayutham" <Prakash.Velayutham@...> 11/16/06 9:11 AM
>>>
Hello All,

Does pam_ldap-183 work completely with OpenLDAP-2.3.29's ppolicy
overlay? I am having issues with Password Expiry warning portion of the
control. The warning message does not make it to the client and gets
lost in the midst.

And looking at pam_ldap sources, it looks like only shadow attributes
(from shadowAccount objectclass) and Netscape directory server's
password policy controls are considered, but I could be wrong to assume
that as I do not know much about pam_ldap's code.

Any help greatly appreciated.
Prakash

Hello All,

The issue turned out to be the OpenSSH version I was running (4.1p1).
Some of the ppolicy warning messages from pam_ldap were getting lost.
Once I upgraded OpenSSH (to 4.5p2, which is the latest right now), all
these issues were resolved.

Prakash