On Sunday 03 May 2009 01:16:20 Carlo Camerino wrote: > Hi Everyone, > > I'm new to openldap and was just wondering if OpenLDAP implements force > change password policy?
Please see 'man slapo-ppolicy'. > Does it expire the password of the user after a specified number of days? It can. See above. > Also can I specify a list of commonly used passwords so that users cannot > use it? Not out-the-box, but there is a module that can be used as a 'pwdCheckModule' that can do this, see http://open.calivia.com/projects/openldap . (This is shipped in some Linux distributions). If compiled with cracklib support, it will check the cracklib dictionaries (not strictly a "list of commonly used passwords"). Regards, Buchan
