Ross Johnson wrote: > I have FDS 1.1.1 running with password policy and syntax checking > working for user passwords via the console, but I haven't been able to > get ldappasswd (from mozldap-tools package) to pay attention to those > password constraints that I know work via the console. That is, > ldappasswd succeeds even when given passwords that fail in the > console. Is this what I should expect to see? No. > > AFAICS from looking at source code, manual pages etc, ldappasswd > passes the plaintext password to the server to be encrypted and if > that's the case then I'm assuming that password checks should be > working. I understand that password checks can't be done if the > userPassword attribute is modified directly, e.g. by ldapmodify. > > I get the feeling I'm missing something very basic, so any > clarification would be greatly appreciated. Do you have the same problem with Fedora DS 1.1.2? Are you sure the password is being sent unencrypted? > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3258 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20080916/48061dac/attachment.bin