I modified UsePrivilegeSeparation parameter but I still have the message and a disconnection. I can avoid this by modifying the pam configuration in sytem-auth file : replace : account required /lib/security/$ISA/pam_unix.so broken_shadow by : account sufficient /lib/security/$ISA/pam_unix.so broken_shadow With this change, that works but I'm directly connected without a prompt to change my password. Is there something wrong with pam_unix or pam_ldap configuration? This was already posted as "pam_ldap and password policy" there is no answer. https://www.redhat.com/archives/fedora-directory-users/2005-June/msg00184.html any ideas? -----Original Message----- From: fedora-directory-users-bounces@xxxxxxxxxx [mailto:fedora-directory-users-bounces@xxxxxxxxxx]On Behalf Of Ivan Ferreira Sent: Tuesday 1 April 2008 18:48 To: General discussion list for the Fedora Directory server project. Cc: fedora-directory-users@xxxxxxxxxx; fedora-directory-users-bounces@xxxxxxxxxx Subject: Re: Problem to reset password If you are connecting via SSH, try changing the UsePrivilegeSeparation parameter. Para <fedora-directory-users@xxxxxxxx om> "FAUCONNIER Valery cc AWL-IT" <valery.fauconnier@atoso Asunto rigin.com> Problem Enviado por: to reset password fedora-directory-users-b Clasificación ounces@xxxxxxxxxx Uso Interno 01/04/2008 10:07 a.m. Por favor, responda a "General discussion list for the Fedora Directory server project." <fedora-directory-users@ redhat.com> I installed fedora-ds to authenticate users. the authentication on our servers seems to work fine but there's wrong with the password policies and specificaly with the password change enforcing. I would like to enforce our users to change their password at first logon (or after a reset of the password) All what I get is a "Change After Reset" string appering on the terminal. nothing else is prompted and the session is disconnected . Does anyone can help about this issue? Atos Worldline SA/NV - Chaussee de Haecht 1442 Haachtsesteenweg - 1130 Brussels - Belgium RPM-RPR Bruxelles-Brussel - TVA-BTW BE 0418.547.872 Bankrekening-Compte Bancaire-Bank Account 310-0269424-44 BIC BBRUBEBB - IBAN BE55 3100 2694 2444 "The information contained in this e-mail and any attachment thereto is confidential and may contain information which is protected by intellectual property rights. This information is intended for the exclusive use of the recipient(s) named above. This e-mail does not constitute any binding relationship or offer toward any of the addressees. If you are not one of the addressees , one of their employees or a proxy holder entitled to hand over this message to the addressee(s), any use of the information contained herein (e.g. reproduction, divulgation, communication or distribution,...) is prohibited. If you have received this message in error, please notify the sender and destroy it immediately after. The integrity and security of this message cannot be guaranteed and it may be subject to data corruption, interception and unauthorized amendment, for which we accept no liability."-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users ======================================================================================== AVISO LEGAL: Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de NUCLEO S.A. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso. This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from NUCLEO S.A. . Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice. -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
