Eric Brown
2008-Jul-07 20:19 UTC
[Fedora-directory-users] Question about setting a Password Policy from the Command Line
I am trying to create an LDIF for importing a default password policy for my FDS server that I can quickly import after I start it. I was looking through the Adminstrator''s Guide and it seems to be missing some fields that are defined in the objectclass for password policy. I was just wondering if the Admin guide was correct and has all of the defined attributes for the policy there and defined, or if these extra ones are also valid and have documentation associated with them. I am using the 1.0.4 version of FDS and I would guess that they online guides have been updated for the newer versions, but I didn''t expect to see this much of a difference. Attributes from the Admin Guide: passwordGraceLimit passwordMustChange passwordChange passwordExp passwordMaxAge passwordWarning passwordCheckSyntax passwordMinLength passwordMinAge passwordHistory passwordInHistory passwordStorageScheme Attributes from the 00core.ldif schema definition of the password policy objectclass: passwordMaxAge passwordExp passwordMinLength passwordKeepHistory passwordInHistory passwordChange passwordWarning passwordLockout passwordMaxFailure passwordResetDuration passwordUnlock passwordLockoutDuration passwordCheckSyntax passwordMustChange passwordStorageScheme passwordMinAge passwordResetFailureCount passwordGraceLimit passwordMinDigits passwordMinAlphas passwordMinUppers passwordMinLowers passwordMinSpecials passwordMin8bit passwordMaxRepeats passwordMinCategories passwordMinTokenLength Just need to know which list is really valid, and I need the documentation or at least explanations of the fields that I can use in my version. Thanks in advance. Eric
Rich Megginson
2008-Jul-10 22:31 UTC
Re: [Fedora-directory-users] Question about setting a Password Policy from the Command Line
Eric Brown wrote:> I am trying to create an LDIF for importing a default password policy > for my FDS server that I can quickly import after I start it. I was > looking through the Adminstrator''s Guide and it seems to be missing > some fields that are defined in the objectclass for password policy. > > I was just wondering if the Admin guide was correct and has all of the > defined attributes for the policy there and defined, or if these extra > ones are also valid and have documentation associated with them. I am > using the 1.0.4 version of FDS and I would guess that they online > guides have been updated for the newer versions, but I didn''t expect > to see this much of a difference. > > Attributes from the Admin Guide: > passwordGraceLimit > passwordMustChange > passwordChange > passwordExp > passwordMaxAge > passwordWarning > passwordCheckSyntax > passwordMinLength > passwordMinAge > passwordHistory > passwordInHistory > passwordStorageScheme > > Attributes from the 00core.ldif schema definition of the password > policy objectclass: > passwordMaxAge > passwordExp > passwordMinLength > passwordKeepHistory > passwordInHistory > passwordChange > passwordWarning > passwordLockout > passwordMaxFailure > passwordResetDuration > passwordUnlock > passwordLockoutDuration > passwordCheckSyntax > passwordMustChange > passwordStorageScheme > passwordMinAge > passwordResetFailureCount > passwordGraceLimit > passwordMinDigits > passwordMinAlphas > passwordMinUppers > passwordMinLowers > passwordMinSpecials > passwordMin8bit > passwordMaxRepeats > passwordMinCategories > passwordMinTokenLength > > Just need to know which list is really valid,The latter.> and I need the > documentation or at least explanations of the fields that I can use in > my version. Thanks in advance. >http://directory.fedoraproject.org/wiki/Password_Syntax> Eric > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Eric Brown
2008-Jul-10 23:13 UTC
Fwd: [Fedora-directory-users] Question about setting a Password Policy from the Command Line
Thank you Rich. This is exactly what I needed. ---------- Forwarded message ---------- From: Rich Megginson <rmeggins@redhat.com> Date: Thu, Jul 10, 2008 at 5:31 PM Subject: Re: [Fedora-directory-users] Question about setting a Password Policy from the Command Line To: "General discussion list for the Fedora Directory server project." <fedora-directory-users@redhat.com> Eric Brown wrote:> > I am trying to create an LDIF for importing a default password policy > for my FDS server that I can quickly import after I start it. I was > looking through the Adminstrator''s Guide and it seems to be missing > some fields that are defined in the objectclass for password policy. > > I was just wondering if the Admin guide was correct and has all of the > defined attributes for the policy there and defined, or if these extra > ones are also valid and have documentation associated with them. I am > using the 1.0.4 version of FDS and I would guess that they online > guides have been updated for the newer versions, but I didn''t expect > to see this much of a difference. > > Attributes from the Admin Guide: > passwordGraceLimit > passwordMustChange > passwordChange > passwordExp > passwordMaxAge > passwordWarning > passwordCheckSyntax > passwordMinLength > passwordMinAge > passwordHistory > passwordInHistory > passwordStorageScheme > > Attributes from the 00core.ldif schema definition of the password > policy objectclass: > passwordMaxAge > passwordExp > passwordMinLength > passwordKeepHistory > passwordInHistory > passwordChange > passwordWarning > passwordLockout > passwordMaxFailure > passwordResetDuration > passwordUnlock > passwordLockoutDuration > passwordCheckSyntax > passwordMustChange > passwordStorageScheme > passwordMinAge > passwordResetFailureCount > passwordGraceLimit > passwordMinDigits > passwordMinAlphas > passwordMinUppers > passwordMinLowers > passwordMinSpecials > passwordMin8bit > passwordMaxRepeats > passwordMinCategories > passwordMinTokenLength > > Just need to know which list is really valid,The latter.> > and I need the > documentation or at least explanations of the fields that I can use in > my version. Thanks in advance. >http://directory.fedoraproject.org/wiki/Password_Syntax> > Eric > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users