search for: pam_lookup_policy

...,allow </Limit> <Limit All> Order deny,allow </Limit> <Limit Cancel-Job> Order deny,allow Require user @OWNER @SYSTEM </Limit> </Policy> ====ldap.conf==== uri ldap://10.1.2.203 base dc=something bind_policy soft idle_timelimit 3700 pam_lookup_policy yes pam_password exop nss_initgroups_ignoreusers root,ldap nss_schema rfc2307bis nss_map_attribute uniqueMember member ssl start_tls ldap_version 2 pam_filter objectclass=posixaccount nss_base_passwd ou=Users,dc=something nss_base_shadow ou=Users,dc=something ns...

...been contacted # for the number of seconds specified below. #idle_timelimit 3600 # Filter to AND with uid=%s #pam_filter objectclass=account # The user ID attribute (defaults to uid) #pam_login_attribute uid # Search the root DSE for the password policy (works # with Netscape Directory Server) #pam_lookup_policy yes # Check the 'host' attribute for access control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. #pam_check_host_attr yes # Group to enforce...

...n contacted # for the number of seconds specified below. # idle_timelimit 3600 # Filter to AND with uid=%s # pam_filter objectclass=account # The user ID attribute (defaults to uid) # pam_login_attribute uid # Search the root DSE for the password policy (works # with Netscape Directory Server) # pam_lookup_policy yes # Check the 'host' attribute for access control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. # pam_check_host_attr yes # Check the '...

...r the number of seconds specified below. #idle_timelimit 3600 idle_timelimit 3600 # Filter to AND with uid=%s #pam_filter objectclass=account # The user ID attribute (defaults to uid) #pam_login_attribute uid # Search the root DSE for the password policy (works # with Netscape Directory Server) #pam_lookup_policy yes # Check the 'host' attribute for access control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. #pam_check_host_attr yes # Check the 'a...

...n contacted # for the number of seconds specified below. # idle_timelimit 3600 # Filter to AND with uid=%s # pam_filter objectclass=account # The user ID attribute (defaults to uid) # pam_login_attribute uid # Search the root DSE for the password policy (works # with Netscape Directory Server) # pam_lookup_policy yes # Check the 'host' attribute for access control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. # pam_check_host_attr yes # Check the '...

...been contacted # for the number of seconds specified below. #idle_timelimit 3600 # Filter to AND with uid=%s #pam_filter objectclass=account # The user ID attribute (defaults to uid) #pam_login_attribute uid # Search the root DSE for the password policy (works # with Netscape Directory Server) #pam_lookup_policy yes # Check the 'host' attribute for access control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. #pam_check_host_attr yes # Check the 'a...