Sponsored Content
Operating Systems Linux SuSE ldap client_forcible pwd change Post 302525760 by tuxian on Saturday 28th of May 2011 05:23:22 AM
Old 05-28-2011
ldap client_forcible pwd change

Hi,

I have configured ldap client on openSUSE 11.3 with yast2 config.
Since I am able to get list of all users through getent, it seems configuration done properly.But while logging in with ldap id its prompting for password change.

Code:
login as: testuser
Using keyboard-interactive authentication.
Password:
Using keyboard-interactive authentication.
Your password has expired. Choose a new password.
You are required to change your LDAP password immediately.
Enter login(LDAP) password:

I have other solaris machine as ldap clints, which are working fine.

Do I need to change any pam config ? Smilie

Thanks

Last edited by pludi; 05-28-2011 at 06:54 PM..
 

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

help on PWD

Hi, We all know that pwd (or echo $PWD) gives us the present working dir as output.... but my doubt is that I'ld like to know how to get the present working folder - I mean - name of the current folder alone.. using pwd command I get the full folder name (right from root path)... I need to know... (2 Replies)
Discussion started by: mohanprabu
2 Replies

2. UNIX for Dummies Questions & Answers

pwd

Home directory mounted on one local system as /home/username, same directory mounted on a remote system as /home/engr/username. How to use command to use remote host pwd. For example rsh <remote host> ls -l ~pwd (2 Replies)
Discussion started by: bugsandbunny
2 Replies

3. UNIX for Advanced & Expert Users

echo ${PWD#${PWD%/*/*}/}

Can anyone explain this in detail ... echo ${PWD#${PWD%/*/*}/} Thanks in Advance (1 Reply)
Discussion started by: sakthi.abdullah
1 Replies

4. Solaris

How to change pwd during logging on ftp server?

Dear All, Could I change password while login in to ftp server(solaris 10)? I tried to use fileZilla and command prompt(window) to change my password but It can't. Do you have any suggestion ? Ps. I can't telnet and ssh to the server because of poicy for ftpuser. Thank in advance (3 Replies)
Discussion started by: unitipon
3 Replies

5. AIX

sync samba pwd with aix5.3 pwd

currently, my samba login works just fine. i want my clients to use aix5.3 account to login to samba so they don't have to change samba pwd and aix pwd. i googled, and vi /usr/lib/smb.conf per some of knowledge base, but i could not get to work. aix5.3 and samba 3.0.24.0 thanks in advace..... (2 Replies)
Discussion started by: tjmannonline
2 Replies

6. AIX

How to change normal user id to LDAP user id?

If I create a new user id test: mkuser id=400 test then I want it to LDAP user: chuser -R LDAP SYSTEM=LDAP registry=LDAP test It shows: 3004-687 User "test" does not exist. How to do? (4 Replies)
Discussion started by: rainbow_bean
4 Replies

7. Shell Programming and Scripting

script to change shell's pwd

Hi there, i was presented with a challenge that is beyond my current shell knowledge: how can you have a script that executed interactive will change your current working directory? Example (under MacOS): 1. start Terminal and my current working directory is my home folder 2. execute a... (3 Replies)
Discussion started by: gigagigosu
3 Replies

8. UNIX for Advanced & Expert Users

something like LDAP Administrator 2011.1 "LDAP-SQL" but for the CLI

Hi I am searching a tool like "LDAP Administrator 2011.1"/ "LDAP-SQL" but for the CLI. Wish to use LDAP-SQL in scripts (non Windows GUI environment) http://ldapadministrator.com/resources/english/2011.1/images/sqlquery_large.png Softerra LDAP Administrator 2011.1 - What's New OS is... (2 Replies)
Discussion started by: slashdotweenie
2 Replies

9. Web Development

Getting apache to see a LDAP group membership change

trying to implement authz to a webpage using require ldap-group. It works, except I need to do apachectl restart before the server will observe an add or a delete to the group. Seems like apache is acquiring the group membership at startup & caching it. It's a static group. I have apache... (0 Replies)
Discussion started by: maraixadm
0 Replies

10. Solaris

LDAP Client not connecting to LDAP server

I have very limited knowledge on LDAP configuration and have been trying fix one issue, but unsuccessful. The server, I am working on, is Solaris-10 zone. sudoers is configured on LDAP (its not on local server). I have access to login directly on server with root, but somehow sudo is not working... (9 Replies)
Discussion started by: solaris_1977
9 Replies
Net::LDAP::Control::PasswordPolicy(3)			User Contributed Perl Documentation		     Net::LDAP::Control::PasswordPolicy(3)

NAME
Net::LDAP::Control::PasswordPolicy - LDAPv3 Password Policy control object SYNOPSIS
use Net::LDAP; use Net::LDAP::Control::PasswordPolicy; use Net::LDAP::Constant qw( LDAP_CONTROL_PASSWORDPOLICY ); $ldap = Net::LDAP->new( "ldap.example.com" ); $pp = Net::LDAP::Control::PasswordPolicy->new; $mesg = $ldap->bind( "cn=Bob Smith,dc=example,dc=com", password => "secret", control => [ $pp ] ); # Get password policy reponse my($resp) = $mesg->control( LDAP_CONTROL_PASSWORDPOLICY ); if (defined($resp)) { my $v = $resp->pp_error; print "Password policy error $v " if defined $v; $v = $resp->time_before_expiration; print "Password expires in $v second(s) " if defined $v; } DESCRIPTION
"Net::LDAP::Control::PasswordPolicy" provides an interface for the creation and manipulation of objects that represent "PasswordPolicyRequest"s and "PasswordPolicyResponse"s as described by draft-behera-password-policy-09. This control can be passed to most operations, including the bind. CONSTRUCTOR ARGUMENTS
There are no constructor arguments other than those provided by Net::LDAP::Control. METHODS
time_before_expiration If defined, this is an integer value holding the time left in seconds before the account's password will expire. grace_authentications_remaining If defined, this is an integer value holding the number of authentication requests allowed before the account is locked. pp_error If defined, this contains a more detailed error code for the account. See Net::LDAP::Constant for definitions of each. Values can include: LDAP_PP_PASSWORD_EXPIRED LDAP_PP_ACCOUNT_LOCKED LDAP_PP_CHANGE_AFTER_RESET LDAP_PP_PASSWORD_MOD_NOT_ALLOWED LDAP_PP_MUST_SUPPLY_OLD_PASSWORD LDAP_PP_INSUFFICIENT_PASSWORD_QUALITY LDAP_PP_PASSWORD_TOO_SHORT LDAP_PP_PASSWORD_TOO_YOUNG LDAP_PP_PASSWORD_IN_HISTORY SEE ALSO
Net::LDAP, Net::LDAP::Control, Net::LDAP::Constant, draft-behera-ldap-password-policy-09.txt AUTHOR
Chris Ridd <chris.ridd@isode.com> Please report any bugs, or post any suggestions, to the perl-ldap mailing list <perl-ldap@perl.org> COPYRIGHT
Copyright (c) 2008 Chris Ridd. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.16.2 2012-09-20 Net::LDAP::Control::PasswordPolicy(3)
All times are GMT -4. The time now is 06:52 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy