Re: password policy

[Mark Reynolds <mreynolds@xxxxxxxxxx>]

On 02/27/2018 03:15 PM, Alberto Viana wrote:

Hey Mark,

Another question, what is the right way to disable a subtree policty (could not found anything in the docs, even the RHDS)?

Just delete the policy entry (nsPwPolicyEntry and nsPwTemplateEntry)?

Correct, it can not be turned off.  It exists or doesn't.  When it's not present the global policy takes effect.

And once I did that, the global policy takes over?

Thanks

On Tue, Feb 27, 2018 at 4:59 PM, Mark Reynolds <mreynolds@xxxxxxxxxx> wrote:

On 02/27/2018 02:30 PM, Alberto Viana wrote:

Mark,

Thanks a lot.

No problem Alberto!

On Tue, Feb 27, 2018 at 4:28 PM, Mark Reynolds <mreynolds@xxxxxxxxxx> wrote:

On 02/27/2018 02:22 PM, Alberto Viana wrote:

I think I was not clear enough,

I have 2 users under cn=config (my replication users) under dn: cn=config

uid=rep389,cn=config

uid=repad,cn=config

If I set a global password policy, this policy applies to these users?

Yes it does

Tanks

On Tue, Feb 27, 2018 at 3:58 PM, Mark Reynolds <mreynolds@xxxxxxxxxx> wrote:

Correct, all the "global" password policy settings are stored in the cn=config entry.

On 02/27/2018 01:24 PM, Alberto Viana wrote:

Hi guys,

When I enable global password policy, is that suppose to affect cn=config?

I Just want to confirm that.

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx