Re: posixaccount and shadowlastchange

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2007-09-25 at 09:55 -0400, Victor Hugo dos Santos wrote:
> Hello,
> 
> Linux authentication based in FDS work fine, i log in the system for
> ssh and all users is in the FDS directory. cool !!!
> 
> but, i need use police security account for users (for example, in 60
> days this users need change the password or can't use the same
> password 3 times consecutive).
> 
> but the FDS dont work with shadow parameters, i run "getent passwd"
> and look all users (local and in FDS) but I run "getent shadow" and
> only show the local account, none account in the FDS.
> 
> how is possible manage the security police from posixaccount and more
> important, that for users continue being one transparent process.
> 
> URL ?? manual ?? docs ?? others ??
> 
> thanks
> 
> -- 

Your accounts need to have the "shadowAccount" objectclass and
"shadowLastChange" needs to be writable by ldap://self or by the dn that
changes their password on their behalf (if you use "rootbinddn" in your
pam ldap.conf).

-Steve

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux