Re: Back-ldap configuration and id-assertion.

2010-09-06 Thread masarati
> On Wed, Sep 1, 2010 at 7:33 PM, wrote: >>> On Wed, Sep 1, 2010 at 11:14 AM, Mustafa A. Hashmi >>> wrote: On Wed, Sep 1, 2010 at 12:11 AM, Mustafa A. Hashmi wrote: > On Tue, Aug 31, 2010 at 9:31 PM,   wrote: I've uploaded the log file named: mustafa-hashmi-201

Re: Defining a password attributetype

2010-09-06 Thread Michael Ströder
Buchan Milne wrote: > On Friday, 3 September 2010 19:26:05 Michael Ströder wrote: >> IMO that's bad practice. When doing a password reset you should set a >> random value in userPassword together with password expiration attribute >> (slapo-ppolicy). > > IMHO, the correct attribute to set would ha

Re: Can't start replication

2010-09-06 Thread Alister Forbes
Hi Dieter, Password was created with slappasswd, and I know it's ok, because I can use ldapsearch, ldapmodify etc, to search, check etc, it's stored in the config in {SSHA} format, but presented in the olcSynRepl line in cleartext. (It's not actually $PASS, I'm just stupidly paranoid about pas

Re: Can't start replication

2010-09-06 Thread Alister Forbes
Found it! It was all my own fault... the binddn is wrong. I can't tell you how long I've been looking at that.. and how much of a pillock I now feel. But to hopefully help someone learn from my mistakes... The binddn given in the documentation on openldap.org shows binddn="cn=config" this wa

Invitation to connect on LinkedIn

2010-09-06 Thread Vinay Jain
LinkedIn Vinay Jain requested to add you as a connection on LinkedIn: -- Edward, I'd like to add you to my professional network on LinkedIn. - Vinay Accept invitation from Vinay Jain http://www.linkedin.com/e/-48cabe-gdr321y2-1a/IxIpDd2wsdsod7

Re: Defining a password attributetype

2010-09-06 Thread Buchan Milne
On Friday, 3 September 2010 19:26:05 Michael Ströder wrote: > IMO that's bad practice. When doing a password reset you should set a > random value in userPassword together with password expiration attribute > (slapo-ppolicy). IMHO, the correct attribute to set would have been pwdReset, but unfort

Re: [Fwd: PAM not warning for password expiration]

2010-09-06 Thread Buchan Milne
On Friday, 3 September 2010 13:15:21 Dannie Obbink wrote: > Forwarded Message > > > From: Obbink, D. (Dannie) > > To: openldap-technical@openldap.org > > Subject: PAM not warning for password expiration > > Date: Thu, 22 Jul 2010 19:29:36 +0200 > > > > When users with an expire

Re: Password history configuration for ldap users.

2010-09-06 Thread Meghanand Acharekar
Thanks for valuable information. On Thu, Sep 2, 2010 at 1:46 PM, Buchan Milne wrote: > On Wednesday, 1 September 2010 08:44:33 Meghanand Acharekar wrote: > > Hello, > > > > I have configured openldap server on RHEL 5.4 > > I also want to enforce strong password policies for my ldap users. > > Hav

Re: Can't start replication

2010-09-06 Thread Dieter Kluenter
Alister Forbes writes: > Hi Dieter, > > Here are the two ldifs I used to configure everything: (only difference is > the order the olcServerID is placed in. > > First Master: > dn: cn=config > changetype: modify > replace: olcServerID > olcServerID: 10 ldap://10.211.55.8 > olcServerID: 20 ldap: