On Tue, 2017-04-25 at 17:02 -0700, Lucas Sweany wrote: > Does anyone know the specific limitations on the allowed characters for > passwords in 389-ds? I use the windows passsync agent on my domain > controllers and occasionally come across this problem. I am thinking there > might be a unicode problem, but I am having a hard time nailing it down, or > finding documentation on it for that matter. > > Example event from 389-ds: > > [24/Apr/2017:07:39:15 +0000] conn=268899 op=2 MOD > dn="uid=xxx,ou=yyy,dc=a,dc=b,dc=c", invalid password syntax This will be defined by your password policy in cn=config, or by subtree password policies on the objects themself. https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/using_windows_sync-synchronizing_users#Schema_Differences-password-policies https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/user_account_management#User_Account_Management-Managing_the_Password_Policy I hope this helps! > > > Thanks, > > -Lucas > _______________________________________________ > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx -- Sincerely, William Brown Software Engineer Red Hat, Australia/Brisbane
Attachment:
signature.asc
Description: This is a digitally signed message part
_______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx