[ale] cracklib and ldap

[Jim Kinney]

Isn't there a pam module for cracklib. ldap uses/can pam anyway so a
password change will be reflected through the pam chain and hit the
cracklib process before it goes to ldap. Then the ldap process will
get the notice of the failed change and pass it on.

you will likely need: libpam-cracklib libnss-ldap libpam-ldap


This may be what you are looking for:
http://ltb-project.org/wiki/documentation/openldap-ppolicy-check-password

On Fri, Oct 16, 2009 at 4:02 PM, Geoffrey <lists at serioustechnology.com> wrote:
> scott wrote:
>> The question is do you really want cracklib in ldap or do you want to
>> use cracklib against the ldap tree?
>>
>> What is the ultimate goal here?  what are you trying to accomplish?
>
> password strength.  Dictionary.
>
>>
>> Thanks
>> scott
>>
>> On Oct 16, 2009, at 9:38 AM, Geoffrey wrote:
>>
>>> Trying to figure out how to get cracklib functionality in ldap.
>>>
>>> We need to do dictionary checking against passwords.
>>>
>>> Anyone know how to accomplish this?  It does not appear ldap comes
>>> built
>>> with cracklib support.
>>>
>>> Pointers to docs would be greatly appreciated.
>>>
>>>
>>> --
>>> Until later, Geoffrey
>>>
>>> Those who would give up essential Liberty, to purchase a little
>>> temporary Safety, deserve neither Liberty nor Safety.
>>>  - Benjamin Franklin
>>> _______________________________________________
>>> Ale mailing list
>>> Ale at ale.org
>>> http://mail.ale.org/mailman/listinfo/ale
>>> See JOBS, ANNOUNCE and SCHOOLS lists at
>>> http://mail.ale.org/mailman/listinfo
>>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>>
>
>
> --
> Until later, Geoffrey
>
> Those who would give up essential Liberty, to purchase a little
> temporary Safety, deserve neither Liberty nor Safety.
>  - Benjamin Franklin
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>



-- 
-- 
James P. Kinney III
Actively in pursuit of Life, Liberty and Happiness