Re: WindowsSync password not synced when changed via ldapmodify

[Nathan Kinder <nkinder@xxxxxxxxxx>]

Jeff Gamsby wrote:
> > Jeff Gamsby wrote:
> >     
> > > I came across this problem today.
> > >
> > > When changing passwords from the Fedora console, it works and syncs
> > > across to AD.
> > > When changing passwords using 'passwd', it does not sync until
> > > pam_password is changed to ssha in ldap.conf. Then it syncs fine.
> > > When changing passwords via ldapmodify in SSHA form, passwords do not
> > > sync.
> > >       
> > FDS needs the clear text password in order to sync it to AD.  The
> > solution is to let FDS hash the password instead of doing it on the
> > client side.
> >
> > -NGK
> >     
>
>  OK, Thanks it works now. I wasn't meeting the password complexity
> requirements.
>   
If you turn on password syntax checking on the FDS side, the default 
settings match that of AD's password complexity requirements.

-NGK
> Thanks
>
> Jeff
>   
> > > Has anyone experienced this behavior?
> > >
> > > Does anyone have a solution?
> > >
> > > I'd like to change passwords via a PHP web interface.
> > >
> > > Thanks,
> > > Jeff
> > >
> > > --
> > > Fedora-directory-users mailing list
> > > Fedora-directory-users@xxxxxxxxxx
> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > >       
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users@xxxxxxxxxx
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >     
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users