Re: [389-users] SSH AllowGroups and LDAP authentication

2010-11-08 Thread Morris, Patrick
On 11/8/2010 8:56 AM, Allan Hougham wrote: I need help with this issue, I setting sshd_config with "AllowGroups" but I can´t authenticate with LDAP, the groups are settings up, this is my configuration: Do you have any tutorial or guide for setting ssh authentication groups with LDAP? This is

Re: [389-users] SSH AllowGroups and LDAP authentication

2010-11-09 Thread Morris, Patrick
On 11/9/2010 5:36 AM, Allan Hougham wrote: Hi Patrick, What does "groups ahougham" show on that box? Is that user in an allowed group? ahougham is a user in "Search" group I need anothe parameter or any adicional setting? do you have any tutorial with this configuration and what parameters

Re: [389-users] SSH AllowGroups and LDAP authentication

2010-11-16 Thread Morris, Patrick
On 11/15/2010 10:00 AM, Allan Hougham wrote: Hi, I need autenticate LDAPs Groups, but I can´t Anybody can working with this feature? or mapping users with groups and later configuring the LDAP Client? What are the steps for setting LDAP Clients with LDAP Groups? Did you see my last reply on

Re: [389-users] Enforcement of password policy dependend on presence of {password encryption type}?

2010-09-22 Thread Morris, Patrick
On 9/22/2010 10:32 AM, Gerrard Geldenhuis wrote: Hi Problem Statement: If I have the following ldif executed by Directory Manager: dn: uid=jsmith,ou=People,dc=mycompany changetype: modify replace: userPassword userPassword: 5A80f5A80FFE3A51BA71A0014F88F0204995334D9849DC02E1A7E06dd171 Thi

Re: [389-users] how to get password expiration warnings and password policy

2010-09-24 Thread Morris, Patrick
ded operations (part of LDAP v3 I think). I am using this with great success in java but not sure how much is implemented in PHP. Maybe someone on this list or a php list may know better. 2010/9/24 Morris, Patrick <mailto:patrick.mor...@hp.com>> On 9/23/2010 8:13 PM,

Re: [389-users] shadowLast Change NOT updating was Re: ldappasswd and shadowLastChange attribute

2010-09-29 Thread Morris, Patrick
So... The attribute is there, it's writeable, and it's not being updated when a user changes their password? That really doen't leave much other than PAM configuration. Have you looked at the server access logs to see if an attempt is being made to change it, and if so, what the result is of t

Re: [389-users] Fedora Management Console simply hangs when trying to create user

2010-02-01 Thread Morris, Patrick
Sean Carolan wrote: >>> Anyone have a suggestion how to fix this? >>> >>> >> 389-console -D 9 -f console.log - take a look at the console log >> > > Thanks for your reply, Rich. I tried this and simply got another > console window, but no log entries. Is there a way to do this from > t

Re: [389-users] RH 3-5 systems hanging requiring autofs restart to fix issue

2010-02-23 Thread Morris, Patrick
Charles Gilbert wrote: > Hi everyone, > > I am experiencing an issue with my systems in that autofs, or even > nscd or crond hangs after our RH 3, 4, and 5 machines are being used > for a while. This issue is causing concern that our LDAP install is > not stable obviously, and has sent me on a

Re: [389-users] Password policies and account policies with PAM

2010-03-11 Thread Morris, Patrick
Ivan Ferreira wrote: > > Hi everybody. > > > > I’m testing the password policies and account lockout policies on > Directory Server 1.2.2. > > > > For account lockout policies, it seems that it does not works with pam > authentication, for example for services like login or ssh. > > > > If