LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 11-30-2011, 11:12 AM   #1
Doknik
LQ Newbie
 
Registered: Jun 2010
Posts: 26

Rep: Reputation: 1
How to Reset Password Expiry in OpenLDAP


Hi,
I am trying to find how to change some password policy settings in openLDAP (on a system-wide level) level not on a per user level)such that ALL LDAP account users ie existing and new users have their passwords to expire after 90 days.
I know the main parameter that controls this is the maxPasswdAge parameter but i am not sure how to set this .I have tried different LDApmodify options
but it fails

ldapmodify -W -x -D "cn=Manager,dc=mydomain,dc=local" -f test.ldif

dn: cn=pwdpolicyentry,cn=common,cn=products,cn=OracleContext,o=my_company,dc=com
changetype: modify
replace: pwdMaxAge
pwdMaxAge: 7776000


the error messages was .. modifying entry "cn=pwdpoilicyentry,cn=common,cn=products,cn=Oraclecontext,dc=mydomain,dc=com"
ldapmodify :no such object(32)

matched DN: dc=mydomain ,dc=com


My questions are
1. Are there any alternatives to doing this ie 1. just change a setting manually somewhere in some configuration file and restart the ldap server. ?
2.Are there any service to bounce once done
3.Also i would like to set the pwdExpireWarning setting such that users are warned before their password expires


Does this need any service bounced or restarted after this change ie does ldap service need to be restarted.
I have googled this but found nothing

also on the local linux users machine on i used chage -M to reset the maximum password expiry date for users but again this comand has to run on an adhoc basis per user or maybe by writing a script to do this.Again is there a system wide level change i have made channges in /etc/login-defs but it failed with errors .
Does anything need to be set in pam files .

We are running openldap 2.3.43 on RHel 5.3
Can anyone share their experience on this please.Any help would be greatly appreciated.
 
Old 12-01-2011, 12:40 AM   #2
FragInHell
Member
 
Registered: Sep 2003
Location: Sydney Australia
Distribution: Redhat, Centos, Ubuntu
Posts: 282

Rep: Reputation: 45
Hi

I've just setup Password Polices with openLDAP 2.4.23 on RHEL 5.7 so we should be able to get you going
Have you created the OU to hold the Password policy? can you post your policy LDIF please?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Password expiry notification via mail athreyavc Linux - Security 8 09-17-2010 05:40 AM
password policy expiry in the user sammee Linux - Newbie 5 09-16-2008 09:51 AM
password expiry notification through mail? dsids Linux - Security 1 06-02-2006 04:00 PM
SAmba Password Expiry bally Linux - General 0 11-29-2004 11:42 PM
Password expiry klmn1 Linux - Networking 0 12-29-2002 11:29 PM


All times are GMT -5. The time now is 07:50 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration