LDAP + password aging

[Martijn Bruns]

Hi all.

I have installed Netscape DS 4.13 and LDAP/UX on 11.00.

I got authentication from the LDAP-server working nicely. I did this by adding the posixaccount-class to the standard user account in Netscape.

What i can't figure out is how password aging works. It doesn't seem to work (or partially) from Netscape itself.

I tried adding the shadowaccount-class, which has some attributes for password aging. This causes system authentication to think the password has expired and it will stay expired, no matter when or how i change the password.

Does anyone know how LDAP/UX implements password aging exactly?

[Bob Neal-Joslin]

Hi,

The shadowaccount object class exists right now purely for NIS only support (and not on HP-UX, as shadow does not exist at this time.)

However, LDAP-UX does follow the policy governed by the directory server itself. If you're using NDS, then using the Console, you can configure the password policy for the server. I haven't got a 4.13 Console up to help guide you through, but when you open the server instance in the console, I think it's under the "configuration" tab.

Good Luck,

Bob