RE: ppolicy not verifying password length (not active !!)

Hi again, I did create another user, gave it the proper permissions via ACL, and it worked, the policy was enforced when I tried to change another user's password. Still in shock though, that the root user can mess up the other users data. Regards De:

Re: ppolicy not verifying password length (not active !!)

Could you please share the steps with commands. This probably will help me. Regards Sam Sent from my iPhone On 6 Mar 2014, at 4:40 pm, Rodrigo Coutinho rodrigo.couti...@ifap.pt wrote: Hi again, I did create another user, gave it the proper permissions via ACL, and it worked, the

Re: ppolicy not verifying password length (not active !!)

On 06.03.2014 09:40, Rodrigo Coutinho wrote: Still in shock though, that the root user can mess up the other users data. This I find strange. Root or the superuser or whatever having full access it the norm in many systems, like Unix, and is for special use by qualified personnel only. My

RE: ppolicy not verifying password length (not active !!)

Hi, in this struggle of implementing OpenLdap for the first time, without any knowledge whatsoever, I found this book: http://tazlambert.files.wordpress.com/2008/05/packtpublishingmasteringopenldapaug20071847191029.pdf In case of the password policy, I more or less followed it from page

Re: LDAP Passwordless SSH Problem

Hi Mike, I'm not sure which means you are referring to, but I do have a user named 'user' which I created locally, and 'user' can passwordless ssh across the cluster just fine. = [root@usdtwclus01 ~]# su - user

Re: LDAP Passwordless SSH Problem

On 03/05/14 13:29 -0800, Kamran Khan wrote: I have a cluster, running RHEL6.5, which I have installed and configured LDAP w/ TLS support. The systems are all authenticating using LDAP properly, and I have added a test user to make sure this works. I can 'su' into the new user, and SSH across all

Re: Slapd TLS issue

Hi, Does anyone know where the database in the message: TLS: error: the certificate '/etc/pki/tls/certs/ldap. cassens.com.pem' could not be found in the database - error -12285:Unable to find the certificate or key necessary for authentication Is located at and how I might rebuild it? Also, the

Re: Slapd TLS issue

On 03/06/14 16:13 -0600, Eric Falbe wrote: Hi, Does anyone know where the database in the message: TLS: error: the certificate '/etc/pki/tls/certs/ldap. cassens.com.pem' could not be found in the database - error -12285:Unable to find the certificate or key necessary for authentication This

Re: Slapd TLS issue

On Thu, 6 Mar 2014, Eric Falbe wrote: Does anyone know where the database in the message: TLS: error: the certificate '/etc/pki/tls/certs/ldap. cassens.com.pem' could not be found in the database - error -12285:Unable to find the certificate or key necessary for authentication Is located at

Help with trying to setup RE: Issues with setting up multiple master

Hi Any one got any hints at what I can look at to fix this ? Alex -Original Message- From: Alex Samad - Yieldbroker Sent: Wednesday, 5 March 2014 4:11 PM To: 'openldap-technical@openldap.org' Subject: Issues with setting up multiple master Hi So I am setting up multi master

Re: Slapd TLS issue

On 05.03.2014 22:27, Eric Falbe wrote: I have attempted to rebuild the database backend (with slapcat and slapadd), but am still getting this same error. I have my ssl (self-signed) certificates located in /etc/pki/tls/certs/ldap.cassens.com.pem /etc/pki/tls/tls/certa/ca.pem

Re: Documentation required on openldap 2.4.39

--On March 5, 2014 at 2:12:05 PM +0800 saurabh ohri sam_o...@yahoo.co.in wrote: Hi, Does anyone installed openldap 2.4.39 or later. Please help me with self created document as i am getting stuck at various point. I have installed and configured but not able to : 1) Change the ldap to

Re: Slapd TLS issue

Yes, the openldap rpm was just updated, but it did not take effect until the slapd deamon was restarted. I have not explicitly tried to use the Mozilla NSS database, I did not use the TLSCADIR(?) attribute and instead used: olcTLSCertificateFile , olcTLSCertificateKeyFile, and

Re: Slapd TLS issue

Eric Falbe wrote: Yes, the openldap rpm was just updated, but it did not take effect until the slapd deamon was restarted. I have not explicitly tried to use the Mozilla NSS database, I did not use the TLSCADIR(?) attribute and instead used: olcTLSCertificateFile , olcTLSCertificateKeyFile,

RE: Help with trying to setup RE: Issues with setting up multiple master

So I have started with a blank db +++ dn: cn=config objectClass: olcGlobal cn: config olcConfigFile: /etc/openldap/slapd.conf.bak olcConfigDir: /etc/openldap/slapd.d olcAllows: bind_v2 olcArgsFile: /var/run/openldap/slapd.args olcAttributeOptions: lang- olcAuthzPolicy: none olcConcurrency: 0