Re: [SM-USERS] squirrelmail (Change LDAP Password) - password restrictions problem

[Tomas K. <to...@us...>]

czarnywilk-001 wrote:
> 
> Hello,
> 
> I use Etch/Debian Linux, LDAP (slapd) with ppolicy.schema. This works
> with squirrelmail very good.
> 
> ppolicy feature forces password restrictions (also password length).
> I set min. password length on 8 characters, and under shell (example bash)
> ppolicy feature works fine. When I change password (command passwd or
> ldappassword) shorter passwords are deny,
> 
> I have a problem with it under squirrelmail. Plugin change LDAP Password
> under squirrelmail works good too (change password), but in this case
> password restrictions don't force at all. My LDAP accept also very
> short password (example one character).
> 
> This a bad idea.
> 
> How can this plugin ignore LDAP restriction password ? I don't understand
> it at all.
> 
> How command use this plugin to change password in LDAP ? How can I force
> longer password ?
> 

ppolicy is applied through pam. It is followed only when code knows about it
and follows it.

Get change_password plugin from SquirrelMail 1.5.1
(http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/tags/rel-1_5_1/squirrelmail/plugins/change_password/)
and set minimal password length there. If you run ldap based email service,
you don't need features that available only in change_ldappass plugin. Etch
does not have PHP crack extension. filtering is needed only by some setups.
smb passwords are not used in email setups.

-- 
Tomas
-- 
View this message in context: http://www.nabble.com/squirrelmail-%28Change-LDAP-Password%29---password-restrictions-problem-tp16904456p16909815.html
Sent from the squirrelmail-users mailing list archive at Nabble.com.