On Apr 14, 2022, at 20:49, Jonathan Billings <billings@xxxxxxxxxx> wrote:
Now that I have said that, if you are using OpenLDAP as an authentication source (and not just binding to it), there is a password policy overlay you can use that you can set the number of passwords you save and password quality, and so forth. Described here: But using LDAP as a place to store your password hashes is only a little better than NIS and I would recommend against it. If you want to use LDAP for storing user data, I have no problem. But use Kerberos for authentication and LDAP for authorization. And use FreeIPA instead of OpenLDAP. — Jonathan Billings |
_______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
